Brocade Network Advisor SAN User Manual v11.1x (53-1002167-01, May 2011)

Brocade Network Advisor SAN User Manual 531

53-1002167-01

Adding target tape LUNs for encryption

6. Choose a LUN to be added to an encryption target container using one of the two following

methods:

• Discover. Click to identify the exposed logical unit number for a specified initiator. If you

already know the exposed LUNs for the various initiators accessing the LUN, you can enter

the range of LUNs using the alternative method.

• Enter a LUN number range. Click Show LUNs to add a range of LUNs to be configured for

the selected host. The LUN needed for configuring a Crypto LUN is the LUN that is exposed

to a particular initiator.

7. Select the desired encryption mode. Options are: Native Encryption, DF-Compatible

Encryption, and Cleartext.

• If you change a LUN policy from Native Encryption or DF-Compatible Encryption to Clear

Text, you disable encryption.

• The LUNs of the target that are not enabled for encryption must still be added to the

CryptoTarget container with the Clear Text encryption mode option.

NOTE

The Re-keying interval can only be changed for disk LUNs. For tape LUNs, expiration of the

re-keying interval simply triggers the generation of a new key to be used on future tape

volumes. Tapes that are already made are not re-keyed. To re-key a tape, you need to read the

tape contents using a host application that decrypts the tape contents using the old key, then

rewrite the tape, which re-encrypts the data with the new key.

8. Click OK. The selected tape LUNs are added to the encryption target container.