Technical data

Fabric OS Encryption Administrator’s Guide (DPM) xi
53-1002720-02
Chapter 6 Maintenance and Troubleshooting
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243
Encryption group and HA cluster maintenance. . . . . . . . . . . . . . . 244
Displaying encryption group configuration or status
information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244
Removing a member node from an encryption group. . . . . . 244
Deleting an encryption group . . . . . . . . . . . . . . . . . . . . . . . . . 247
Removing an HA cluster member . . . . . . . . . . . . . . . . . . . . . . 247
Displaying the HA cluster configuration . . . . . . . . . . . . . . . . . 248
Replacing an HA cluster member . . . . . . . . . . . . . . . . . . . . . . 249
Deleting an HA cluster member . . . . . . . . . . . . . . . . . . . . . . . 251
Performing a manual failback of an encryption engine . . . . 252
Encryption group merge and split use cases . . . . . . . . . . . . . . . . 253
A member node failed and is replaced . . . . . . . . . . . . . . . . . 253
A member node reboots and comes back up . . . . . . . . . . . . 254
A member node lost connection to the group leader . . . . . . 255
A member node lost connection to all other nodes
in the encryption group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255
Several member nodes split off from an encryption
group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 256
Adjusting heartbeat signaling values . . . . . . . . . . . . . . . . . . . 257
EG split possibilities requiring manual recovery . . . . . . . . . . 258
Configuration impact of encryption group split or node
isolation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 262
Encryption group database manual operations . . . . . . . . . . . . . . 263
Manually synchronizing the encryption group database. . . . 263
Manually synchronizing the security database . . . . . . . . . . . 263
Aborting a pending database transaction . . . . . . . . . . . . . . . 264
Key vault diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 264
Measuring encryption performance . . . . . . . . . . . . . . . . . . . . . . . 265
General encryption troubleshooting . . . . . . . . . . . . . . . . . . . . . . . 267
Troubleshooting examples using the CLI . . . . . . . . . . . . . . . . . . . . 270
Encryption Enabled CryptoTarget LUN . . . . . . . . . . . . . . . . . . 270
Encryption Disabled CryptoTarget LUN. . . . . . . . . . . . . . . . . . 271
Management application encryption wizard troubleshooting . . . 272
Errors related to adding a switch to an existing group . . . . . 272
Errors related to adding a switch to a new group . . . . . . . . . 273
General errors related to the Configure Switch
Encryption wizard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274
LUN policy troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275
Loss of encryption group leader after power outage . . . . . . . . . . 276
MPIO and internal LUN states . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277
Suspension and resumption of rekeying operations. . . . . . . 277
FS8-18 blade removal and replacement. . . . . . . . . . . . . . . . . . . . 278
Multi-node EG replacement . . . . . . . . . . . . . . . . . . . . . . . . . . 278
Single-node EG replacement. . . . . . . . . . . . . . . . . . . . . . . . . . 280