Brocade Fabric OS Command Reference Manual v6.2.0 (53-1001186-01, April 2009)

Fabric OS Command Reference 149
53-1001186-01
cryptoCfg
2
Description Use these cryptoCfg commands to manage the transaction mechanism for those functions that
require configuration changes to be committed before they take effect. These functions include “3.
High Availability (HA) cluster configuration” and “4. Storage device configuration and
management”.
Transaction commands must be invoked on the group leader.
Operands The cryptoCfg transaction management function has the following operands:
--help transcfg Displays the synopsis for the transaction management function.
--commit Commits the transaction. This command saves the defined configuration to
nonvolatile storage. Changes are persistent across reboots and power cycles.
This command overwrites existing configuration parameters and therefore
prompts for confirmation.
The following operand is optional:
-force Commits the transaction without confirmation.
--transabort transaction_ID
Aborts a pending database transaction for any device configurations invoked
earlier through the CLI or DCFM interfaces. The following operand is required:
transaction_ID Specifies the ID of the transaction to be aborted. Use --transshow to
determine the currently pending transaction ID.
--transshow Displays the pending database transaction for any device configurations
invoked earlier through the CLI or DCFM interfaces. The command displays
the transaction status (completed or pending), the transaction ID, and the
transaction owner (CLI or DCFM).
Examples This section includes examples for the following tasks:
“A. Node configuration” on page 149
“B. Encryption group configuration” on page 151
“C. Group-wide policy configuration” on page 154
“D. High Availability (HA) cluster configuration” on page 154
“E. Storage device configuration” on page 156
“F. Device configuration display commands” on page 159
For additional examples and configuration procedures, refer to the Fabric OS Encryption
Administrator's Guide.
A. Node configuration
To initialize a node and generate certificates (output shows what is generated and where it is
stored):
SecurityAdmin:switch>cryptocfg --initnode
This will overwrite all identification and authentication data
ARE YOU SURE (yes, y, no, n): [no] y
Notify SPM of Node Cfg
Operation succeeded.