Brocade Network Advisor SAN User Manual v11.1x (53-1002167-01, May 2011)

Brocade Network Advisor SAN User Manual 575

53-1002167-01

Viewing and editing group properties

4. Select the Encryption Mode. Options include Clear Text, DF-Compatible Encryption, and Native

Encryption.

• DF-Compatible Encryption is valid only when LKM is the key vault.

• The Key Lifespan (days) field is editable only if the tape pool is encrypted.

• If Clear Text is selected as the encryption mode, the key lifespan is disabled.

NOTE

You cannot change the encryption mode after the tape pool I/O begins. DF-compatible

encryption requires a DF-compatible encryption license to be present on the switch. If the

license is not present, a warning message displays.

5. Enter the number of days to use a key before obtaining a new one, if you choose to enforce a

key lifespan. The default is Infinite (a blank field or a value of 0).

NOTE

The key lifespan interval represents the key expiry timeout period for tapes or tape pools. You

can only enter the Key Lifespan field if the tape pool is encrypted. If Clear Text is selected as

the encryption mode, the Key Lifespan field is disabled.

6. Click OK.

Engine Operations tab

The Engine Operations tab enables you to replace an encryption engine in a switch with another

encryption engine in another switch within a DEK Cluster environment. A DEK Cluster is a set of

encryption engines that encrypt the same target storage device. DEK Clusters do not display in the

Management application, they are an internal implementation feature and have no

user-configurable properties. Refer to “Replacing an encryption engine in an encryption group” on

page 509.

The Engine Operations tab (Figure 274) is viewed from the Encryption Group Properties dialog box.

To access the Engine Operations tab, select a group from the Encryption Center Devices table, then

select Group > Engine Operations from the menu task bar, or right-click a group and select Engine

Operations. The Properties dialog box displays with the Engine Operations tab selected.

NOTE

You can also select a group from the Encryption Center Devices table, then click the Properties icon.