Brocade Fabric OS Encryption Administrator's Guide Supporting Fabric OS v6.2.0 (53-1001201-04, May 2009)

18 Encryption Administrator’s Guide

53-1001201-04

Configure Encryption features

The Configure Encryption dialog box (Figure 6) displays the status of all encryption-related

hardware and functions at a glance. It is the single launching point for all encryption-related

configuration in DCFM.

FIGURE 6 Configure Encryption dialog box

The following encryption features can be launched by clicking the appropriate button from the

Configure Encryption dialog box.

Setup

The Setup button launches the Configure Switch Encryption wizard, which enables you to do the

following tasks:

• Create a new encryption group containing a selected switch.

• Select the key management system (key vault) that you are using.

• Specify the name of the file where you want to store the public key certificate that is used to

authenticate connections to the key vault.

• Specify the location of the file where the backup copy of the encryption master key is stored.

Refer to “Configure Encryption for RKM key vaults” on page 33, “Configure Encryption for LKM key

vaults” on page 42, and “Configure Encryption for HP SKM key vaults” on page 48 for information

specific to your key management system.

NOTE

You must select an encryption-capable switch to enable the Setup button.

Encryption Targets

The Encryption Targets button launches the Encryption Targets dialog box. Any outbound data that

you want to store as encrypted data must be sent to an encryption device before it is stored. The

encryption device needs to act as a target when receiving data from a host, and as an initiator

when writing the encrypted data to storage. See “Encryption Targets dialog box” on page 30 for

more information.