Dell Brocade 6520 Command Reference Supporting Fabric OS v7.1.0 - Page 201
initnode, initEE, regEE, enableEE, disableEE, slotPowerOff, Fabric OS Encryption
View all Dell Brocade 6520 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 201 highlights
cryptoCfg 2 Some of the certificates generated with this command may need to be exported so that they can be registered with external entities, such as the key vault or the group leader, for mutual authentication. Refer to the Fabric OS Encryption Administrator's Guide for details. The --initnode function must be performed before the --initEE function may be performed. --initEE Initializes the encryption engine (EE). This command generates critical security parameters (CSPs) and certificates in the CryptoModule's security processor (SP). The CP and the SP perform a certificate exchange to register respective authorization data. Initialization must be performed on every encryption engine before configuration options may be set and encryption may be enabled. This command prompts for confirmation, because it overwrites any previously generated identification or authentication data on the SP. Existing key encryption keys (KEKs) such as link keys or master keys are erased. If this is not a first-time initialization, make sure to export the master key before running this command. If the encryption engine was configured with an LKM key vault, you will have to reconfigure the key vault to regenerate the Trusted Link after initializing the encryption engine. The --initnode function must be performed before the --initEE function may be performed. slot Specifies the slot number of the encryption engine to be initialized. This operand is required on bladed systems. --regEE Registers a previously initialized encryption engine with the CP or chassis. The CP and the specified encryption engine perform a certificate exchange to register respective authorization lists across the encryption engine's FIPS boundary. The encryption blade's certificate is registered with the CP. The CP, FIPS Crypto Officer, and FIPS User certificate are registered with the specified encryption engine. slot Specifies the slot number of the encryption engine to be registered. This operand is required on bladed systems. --enableEE | --disableEE Enables or disables an encryption engine to perform encryption. You must create the encryption group and complete the key vault registration before you can enable an encryption engine for encryption. In addition, you must re-enable the encryption engine for encryption every time a Brocade Encryption Switch or DCX chassis goes through a power cycle event or after issuing slotPowerOff followed by slotPowerOn for an FS8-18 blade. This command is valid on all nodes. slot Specifies the slot number to identify the encryption engine. This operand is required on bladed systems. Fabric OS Command Reference 173 53-1002746-01