DCFM Professional User Manual
359
53-1001773-01
Steps for connecting to an LKM appliance
14
Tape LUN and DF -compatible tape pool support
•
DEK Creation - The DEK is created and archived to the primary LKM only. Upon successful
archival of the DEK to the primary LKM, the DEK can be used for encryption of a Tape LUN or
DF-Compatible tape pool. The DEK is synchronized to a secondary LKM through LKM
clustering. If DEK archival to the primary LKM fails, DEK archival is retried to the clustered
secondary LKM. If DEK archival also fails to secondary LKM, an error is logged and the
operation is retried.
•
DEK retrieval - The DEK is retrieved from primary LKM if primary is online and reachable. If
primary LKM is not online or not reachable, the DEK is retrieved from the clustered secondary
LKM.
•
DEK update - DEK update behavior is same as DEK Creation.
LKM Key Vault Deregistration
Deregistration of either Primary or Secondary LKM KV from an encryption switch or blade is
allowed independently.
•
Deregistration of Primary LKM - You can deregister the Primary LKM from an encryption switch
or blade without deregistering the backup or secondary LKM for maintenance or replacement
purposes. However, when the primary LKM is deregistered, key creation operations will fail
until either primary LKM is reregistered or the secondary LKM is deregistered and reregistered
as Primary LKM.
When the Primary LKM is replaced with a different LKM, you must first synchronize the DEKs
from secondary LKM before reregistering the primary LKM.
•
Deregistration of Secondary LKM - You can deregister the Secondary LKM independently.
Future key operations will use only the Primary LKM until the secondary LKM is reregistered on
the encryption switch or blade.
When the Secondary LKM is replaced with a different LKM, you must first synchronize the
DEKs from Primary LKM before reregistering the secondary LKM.
Summary of Contents for Brocade BladeSystem 4/12
Page 1: ...53 1001773 01 14 April 2010 DCFM Professional User Manual Supporting DCFM 10 4 X ...
Page 3: ...DCFM Professional User Manual iii 53 1001773 01 ...
Page 4: ...iv DCFM Professional User Manual 53 1001773 01 ...
Page 88: ...56 DCFM Professional User Manual 53 1001773 01 Seed switch 2 ...
Page 146: ...114 DCFM Professional User Manual 53 1001773 01 Customizing the main window 4 ...
Page 152: ...120 DCFM Professional User Manual 53 1001773 01 Launching HCM Agent 5 ...
Page 246: ...214 DCFM Professional User Manual 53 1001773 01 Syslog forwarding 8 ...
Page 262: ...230 DCFM Professional User Manual 53 1001773 01 Generating zoning reports 10 ...
Page 662: ...630 DCFM Professional User Manual 53 1001773 01 ...