Brocade Fabric OS Encryption Administrator's Guide Supporting Fabric OS v6.2.0 (53-1001201-04, May 2009)

Encryption Administrator’s Guide 207
53-1001201-04
General encryption troubleshooting using the CLI
B
“Temporarily out of resources” message received during
re-key or first time encryption.
Re-key or first time encryption sessions are pending due to resource
unavailability. A maximum of twelve sessions including rekey (manual or auto)
and first time encryption sessions are supported per encryption switch or
blade and two sessions per target. The system checks once every hour to
determine, if there are any re-key or first time encryption sessions pending. If
resources are available, the next session in the queue is processed. There
may be up to an hour lag before the next session in the queue is processed. It
is therefore recommended that you do not schedule more than 12 re-key or
first time encryption sessions.
HA cluster creation fails with error, "Create HA cluster
status: The IO link IP address of the EE (online) is not
configured”, even though both the addresses are set and
accessible.
The IP addresses for the I/O link ports should be configured before enabling
the EE. Failure to do so results in unsuccessful HA Cluster creation. If the IP
addresses for these ports were configured after the EE is enabled, reboot the
encryption switch or slotpoweroff/slotpoweron the encryption blade to sync
up the IP address information to the EE.
Re-keying fails with error “Disabled (Key not in sync)”. Re-keying was started on a remote EE but the local EE is not capable of
starting re-key because the key returned from key vault does not match with
the Key ID used by remote EE. You will need to re-enable the LUN after the
keys are synced between two key vaults properly using the needs to cryptocfg
--discoverLUN <Container Name> command.
cryptocfg --commit fails with message “Default zone set
to all access at one of nodes in EG.”
Default zoning must be set to no access. Refer to “Setting default zoning to no
access” on page 95.
TABLE 16 General errors related to using the CLI (Continued)
Problem Resolution