Technical data

188 Fabric OS Encryption Administrator’s Guide (DPM)

53-1002720-02

Configuring LUNs for SRDF/TF or RP deployments

7. Verify that the Replication LUN type of the local/R1 LUNs is “Primary” and that of the

remote/R1 LUNs is “Mirror.”

8. Take all remote target ports associated with CTCs through which the remote LUNs are

accessible offline.

NOTE

If the DEK is not synchronized between the local/R1 site and the remote/R2 site, the

remote/R2 LUN will automatically become disabled.

Configuring TimeFinder target devices

Use TimeFinder (TF) to create any desired target devices, such as snapshots, clones, or mirrors.

The TimeFinder source and destination devices must be the same size.

NOTE

You may skip this section if host access to a target device is not required.

1. Log in as Admin or FabricAdmin.

2. Create the containers for the target ports through which TimeFinder target LUNs will be made

accessible, and add all initiators that require access the target LUNs. If Target devices utilize

the same target ports/containers as the source devices, you may skip this step.

FabricAdmin:switch> cryptocfg --create -container disk <target container name>

<EE to own container> <target PWWN> <target NWWN> -initiator <initiator PWWN>

3. For each path to the target device/LUN, add the LUNs to their respective target containers. All

paths to the TimeFinder target LUN must be added to their containers with the

-newLUN

option.

FabricAdmin:switch> cryptocfg --add -LUN <target container name> <target LUN

ID> <initiator PWWN> <initiator NWWN> -newLUN -lunstate encrypted -encrypt

NOTE

If the target device specified above is a snapshot of a cleartext LUN, the above command

results in that LUN becoming disabled. For cleartext snapshots, use the syntax

-lunstate

cleartext -cleartext.

4. Commit the configuration.

5. Verify the target LUN state shows “encryption enabled” and the key ID used for encryption is

the same as the source LUN's key ID.