HP StorageWorks 8/80 Brocade Fabric OS Command Reference Manual v6.2.0 (53-100 - Page 172

2 cryptoCfg initiator_PWWN initiator_NWWN Specifies the initiator by its port WWN and node WWN. You may optionally modify the following LUN policy configuration parameters. Refer to cryptocfg --add -LUN for descriptions of these parameters. [-encryption_format native | DF_compatible] [-encrypt | cleartext] [-enable_encexistingdata | -disable_encexistingdata] [-enablerekey time_period | -disable_rekey] Make sure you understand the ramifications of modifying LUN parameters (such as changing the LUN policy from encrypt to cleartext) for devices that are online and are already being utilized. The following restrictions apply when modifying LUN policy parameters: • When you change LUN policy from encrypt to cleartext the following policy parameters are restored to default (disabled): -enable_encexistingdata, -enable_rekey, and -key_lifespan. • When changing the LUN policy back to encrypt, these parameters need to be reconfigured. Attempting to reconfigure these parameters while the LUN policy is set to cleartext is not permitted and generates an error. • For tape LUNs the -enable_encexistingdata and the -enable_rekey operands are not valid and return an error when executed. • The -key_lifespan parameter cannot be modified for tape LUNs once it has been set. • Exercise caution when modifying policy parameters while tape sessions are in progress. For information on the impact of encryption policy changes while tape sessions are in progress, refer to the Fabric OS Encryption Administrator's Guide. --rem -LUN Removes a LUN from a specified CTC. You must stop all traffic to the LUN from all initiators accessing the LUN you are removing from the CTC. Failure to do so results in I/O failure between the initiators and the LUN. If the LUN is exposed with different LUN Numbers to different initiators, all exposed LUN Numbers must be removed. This command is valid only on the group leader. The following operands are required when removing a LUN from a CTC: crypto_target_container_name Specifies the name of the CTC from which the LUN is to be removed. LUN_Num Specifies the number of the LUN to be removed. Use --show -container for a list of LUN numbers associated with the specified CTC. initiator_PWWN Specifies the initiator port WWN for the LUN to be removed. --enable -LUN Forces the LUN to become enabled for encryption from a disabled state. This command must be executed on the local switch that is hosting the LUN. No commit is required after executing this command. This command proceeds with a warning and prompts for confirmation. 144 Fabric OS Command Reference 53-1001186-01