HP Cisco MDS 9216i Cisco MDS 9000 Family Storage Media Encryption Configuratio - Page 162
Migrating a KMC Server
View all HP Cisco MDS 9216i manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 162 highlights
Migrating a KMC Server Chapter 6 Cisco SME Key Management Send documentation comments to [email protected] Operation: ABORT_REKEY_MASTER_KEY Logged as: "Abort master key rekey" Description: A re-key operation has been aborted. If the operation cannot be aborted, the failure is logged. Details: SUCCESS: "" FAILURE: "error: " Operation: GET_MASTER_KEY_SHARE Logged as: "Master key share retrieved" Description: When storing master key shares on smartcards, the share is verified as being written correctly by reading the share and comparing. This logs the result of that GET operation. Details: SUCCESS: "share index: smartcard label: smartcard serial number: GUID: " FAILURE: "share index: smartcard label: smartcard serial number: GUID: error: " Operation: REKEY_CLONE_WRAP_KEYS Logged as: "Clone tape volume- group wrap keys" Description: Part of Master Key re-key involves cloning wrap keys and re-wrapping them with the new master key. This logs the result of that cloning and re-wrap operation. Details: SUCCESS: " keys of cloned successfully" FAILURE: " keys of cloned successfully" Migrating a KMC Server To migrate a KMC server, follow these steps: Step 1 Step 2 Migrate all keys to the new KMC server. Refer to the backup and restore procedures outlined in Appendix E, "Database Backup and Restore." After restoring the database, install Fabric Manager in the new KMC server and point the Fabric Manager to the database. This ensures that all the keys are maintained across the KMC migration. 6-48 Cisco MDS 9000 Family Storage Media Encryption Configuration Guide OL-18091-01, Cisco MDS NX-OS Release 4.x