Administrator's Guide Supporting Key Management Interoperability Protocol (KMIP) Key-Compliant Environments (Supporting Fabric OS v7.1.0) User guide
298 Fabric OS Encryption Administrator’s Guide (KMIP)
53-1002747-02
Crypto LUN
adding to CryptoTarget container using the CLI
, 182
configuring
, 182, 183
modifying parameters
, 189
parameters and policies
, 185
removing
, 188
cryptocfg command
--add -haclustermember
, 166
--add -initiator
, 179, 187, 193
--add -LUN
, 184, 194, 204, 208
--commit
, 251
--create -container
, 178, 187, 192
--create -encgroup
, 159
--create -hacluster
, 165
--create -tapepool
, 202
--delete -container
, 181, 245
--delete -encgroup
, 247
--delete -hacluster
, 251
--delete -tapepool
, 203
--dereg -membernode
, 246
--discover -LUN
, 193
--discoverLUN
, 183, 187
--eject -membernode
, 246
--enable -LUN
, 199
--enable -rekey
, 208
--enable_rekey
, 204
--enableEE
, 172, 254
--export
, 161
--exportmasterkey
, 164
--failback -EE
, 252
--genmasterkey
, 163
--import
, 161
--initEE
, 158, 254
--initnode
, 157, 254
--manual _rekey
, 209
--modify -LUN
, 189, 204, 208
--modify -tapepool
, 203
--move -container
, 182
--reg -keyvault
, 159
--reg -membernode
, 162, 254
--regEE
, 158, 254
--rem -haclustermember
, 245
--rem -LUN
, 188, 278
--remove -haclustermember
, 247
--remove -initiator
, 180
--replace -haclustermember
, 249
--replaceEE
, 244, 254
--resume_rekey
, 210, 278
--set -failback
, 168
--set -keyvault LKM
, 159
--show
, 162, 172
--show -container
, 179
--show -groupmember
, 162, 178, 209, 245
--show -hacluster
, 248, 253
--show -tapepool
, 202
--zeroize
, 157
cryptoCfg commands, permissions for
, 143
cryptocfg help
command output
, 141, 145
CryptoTarget container
adding a LUN
, 183
configuring
, 176
creating
, 178
deleting
, 181
discovering a LUN
, 182
moving
, 181
removing a LUN
, 188
removing an initiator from
, 180
CSR
exporting from properties
, 125
D
data rekeying, 207
decommissioned IDs
deleting
, 113
displaying
, 113
DEK (data encryption keys)
, 9
DEK life cycle
, 10
delete commands
--delete -container
, 181, 245
--delete -encgroup
, 247
--delete -hacluster
, 251
--delete -tapepool
, 203
deployment scenarios
deployment as part of an edge fabric
, 222
deployment in fibre channel routed fabrics
, 220
deployment with FCIP extension switches
, 223
dual fabric deployment
, 215
single fabric deployment
, 213, 214
deployment with admin domains (AD)
, 237
deregister command,--dereg -membernode
, 246
DHCP for IP interfaces
, 237
discover commands
--discover -LUN
, 193
--discoverLUN
, 183, 187
disk devices
decommissioning
, 112