HP 1606 HP StorageWorks Fabric OS 6.3.2b Release Notes (5697-0777, November 20 - Page 39

Initial setup of encrypted LUNs, Documentation Updates

Page 39 highlights

creation operation will not function. For Key retrieval, this is not the requirement and any one Key Vault being online will get the Key as long as that Key Vault has the Key. Initial setup of encrypted LUNs IMPORTANT: While performing first-time encryption to a LUN with more than one initiator active at the time, rekey operations slow to a standstill. Define LUNs for a single initiator at a time to avoid this occurrence. NOTE: When configuring multipath LUNs, care should be taken to add LUN 0 on all of the paths, subject to the following considerations: • If LUN 0 presented by the back-end target is a controller LUN (not a disk LUN; that is, not visible in the discoverLUN output), add LUN 0 to the container as a clear text LUN. Make sure all of the paths have this LUN 0 added for MPIO operation (EVA configuration, for example). • If LUN 0 presented by the back-end target is a disk LUN, LUN 0 can be added to the container either as clear text or encrypted (MSA configuration, for example). • For HP-UX, LUN 0 can appear as 0x0 or 0x400, but both of them are LUN 0 only and should be treated alike. Documentation Updates This section provides information on last minute additions and corrections to the documentation. The most recent Fabric OS 6.3 documents are available on www.hp.com in the "manuals" section for switches that support that version of Fabric OS (the "manuals" section is accessible once you navigate to a particular switch). The updates noted in this section are in addition to those included in the previous Fabric OS 6.3.0x Release Notes. There are no additional documentation updates for 6.3.2b. NOTE: The Fabric OS FCIP Administrator Guide and Fabric OS Command Reference documents are updated to reflect new support and changes in Fabric OS 6.3.1. Brocade Fabric OS Command Reference (Publication Number 53-1001337-01) The cryptoCfg command description and associated man page should be updated as follows: On pages 148 and 149, under the "Storage device configuration and management" function of the cryptoCfg command, two new parameters have been added to the --add and --modify -LUN commands. cryptocfg --add -LUN crypto_target_container_name LUN_Num | LUN_Num_Range [initiator_PWWN initiator NWWN [initiator_PWWN initiator NWWN]...] [-lunstate encrypted | cleartext] [-keyID keyID] [-encryption_format native | DF_compatible] [-encrypt | -cleartext] [-enable_encexistingdata | -disable_encexistingdata] HP StorageWorks Fabric OS 6.3.2b Release Notes 39

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52

creation operation will not function. For Key retrieval, this is not the requirement and any one Key
Vault being online will get the Key as long as that Key Vault has the Key.
Initial setup of encrypted LUNs
IMPORTANT:
While performing first-time encryption to a LUN with more than one initiator active at the time, rekey
operations slow to a standstill. Define LUNs for a single initiator at a time to avoid this occurrence.
NOTE:
When configuring multipath LUNs, care should be taken to add LUN 0 on all of the paths, subject to
the following considerations:
If LUN 0 presented by the back-end target is a controller LUN (not a disk LUN; that is, not visible
in the
discoverLUN
output), add LUN 0 to the container as a clear text LUN. Make sure all of
the paths have this LUN 0 added for MPIO operation (EVA configuration, for example).
If LUN 0 presented by the back-end target is a disk LUN, LUN 0 can be added to the container
either as clear text or encrypted (MSA configuration, for example).
For HP-UX, LUN 0 can appear as 0x0 or 0x400, but both of them are LUN 0 only and should be
treated alike.
Documentation Updates
This section provides information on last minute additions and corrections to the documentation. The
most recent Fabric OS 6.3 documents are available on
w
w
w
.hp
.co
m
in the "manuals" section for
switches that support that version of Fabric OS (the
manuals
section is accessible once you navigate
to a particular switch). The updates noted in this section are in addition to those included in the
previous Fabric OS 6.3.0x Release Notes. There are no additional documentation updates for 6.3.2b.
NOTE:
The
Fabric OS FCIP Administrator Guide
and
Fabric OS Command Reference
documents are updated
to reflect new support and changes in Fabric OS 6.3.1.
Brocade Fabric OS Command Reference (Publication Number 53-1001337-01)
The
cryptoCfg
command description and associated man page should be updated as follows: On
pages 148 and 149, under the
Storage device configuration and management
function of the
cryptoCfg
command, two new parameters have been added to the
--add
and
--modify –LUN
commands.
cryptocfg --add -LUN
crypto_target_container_name LUN_Num | LUN_Num_Range
[initiator_PWWN initiator NWWN [initiator_PWWN initiator NWWN]...]
[-lunstate encrypted | cleartext] [-keyID keyID]
[-encryption_format native | DF_compatible]
[-encrypt | -cleartext] [-enable_encexistingdata | -disable_encexistingdata]
HP StorageWorks Fabric OS 6.3.2b Release Notes
39