HP Brocade 8/12c Fabric OS Encryption Administrator's Guide - Page 230

to EE1 automatically fails back to the replaced encryption engine EE3.

Page 230 highlights

6 Encryption group and HA cluster maintenance 1. Invoke the cryptocfg --replace -haclustermember command on the group leader to replace the failed encryption engine (EE2) with another encryption engine (EE3). This operation effectively removes the failed encryption engine (EE2) from the HA cluster and adds the replacement encryption engine (EE3) to the HA cluster. The target associations (T2) from the failed encryption engine (EE2) are transferred to the replacement encryption engine (EE3). 2. Commit the transaction. If failback mode is set to auto, the target (T2) which failed over earlier to EE1 automatically fails back to the replaced encryption engine (EE3). 3. Invoke the cryptocfg --reclaimWWN -EE command on the group leader followed by WWN of the DCX/DCX-4S and the slot number of the encryption engine to be removed. 4. Invoke the cryptocfg --commit command to sync the configuration in the encryption group. 5. After the transaction is committed, remove the failed encryption engine from the encryption group. FIGURE 110 Replacing a failed encryption engine in an HA cluster 210 Fabric OS Encryption Administrator's Guide 53-1002159-03

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282

210
Fabric OS Encryption Administrator’s Guide
53-1002159-03
Encryption group and HA cluster maintenance
6
1.
Invoke the
cryptocfg
--
replace -haclustermember
command on the group leader to replace the
failed encryption engine (EE2) with another encryption engine (EE3). This operation effectively
removes the failed encryption engine (EE2) from the HA cluster and adds the replacement
encryption engine (EE3) to the HA cluster. The target associations (T2) from the failed
encryption engine (EE2) are transferred to the replacement encryption engine (EE3).
2.
Commit the transaction. If failback mode is set to
auto
, the target (T2) which failed over earlier
to EE1 automatically fails back to the replaced encryption engine (EE3).
3.
Invoke the
cryptocfg
--
reclaimWWN -EE
command on the group leader followed by WWN of the
DCX/DCX-4S and the slot number of the encryption engine to be removed.
4.
Invoke the
cryptocfg
--
commit
command to sync the configuration in the encryption group.
5.
After the transaction is committed, remove the failed encryption engine from the encryption
group.
FIGURE 110
Replacing a failed encryption engine in an HA cluster