Technical data

Fabric OS Encryption Administrator’s Guide (DPM) 291
53-1002720-02
Moving an encryption blade from one EG to another in the same fabric
6
Admin:switch> cryptocfg --dereg -membernode <FOS3-WWN>
5. Enter the following command on FOS3 to clean up the encryption configuration on the
deregistered node:
Admin:switch> cryptocfg –-reclaimWWN –cleanup
When prompted, enter yes to each prompt.
6. Repeat steps 1–5 for FOS4.
7. Create a new EG on FOS3:
a. Create the group:
Admin:switch> cryptocfg --create -encgroup FOS3
b. Set the key vault type.
Admin:switch> cryptocfg --set -keyvault RKM/DPM
When prompted, enter yes to each prompt.
8. Add FOS4 as a member node to the new EG.
• For details about adding member nodes to an EG, see“Adding a member node to an encryption
group” on page 143.
• For details about creating encryption groups, see “Creating an encryption group” on page 35.
Moving an encryption blade from one EG to another in the same fabric
In this example, which is represented in Table 17, you have two EGs, each containing two nodes.
You want to move the blade currently located in DCX1, slot 4 to DCX2, slot 3 in EG2.
1. Enter the following command on FOS1 to reclaim the VI/VT WWN base for the encryption
engine to be moved out of the EG.
Admin:switch> cryptocfg --reclaimWWN -EE <DCX1_WWN> 4
When prompted, answer yes.
2. Enter the following command to propagate the change throughout the EG:
Admin:switch> cryptocfg --commit
3. Remove the blade from DCX1, slot 4 and plug into DCX2, slot 3.
TABLE 17 Moving a blade from one EG to another EG
Encryption group Nodes (before move) Nodes (after move)
EG1 FOS1 (Group Leader)
DCX1—Contains 2 FS-18 blades (slot 2 and
slot 4)
FOS1 (Group Leader)
DCX1—Contains 1 FS-18 blade in slot 2
EG2 FOS2 (Group Leader)
DCX2—Contains 1 FS-18 blade in slot 2
FOS2 (Group Leader)
DCX2—Contains 2 FS-18 blades (slot 2 and
slot 3)