Data Center Fabric Manager Enterprise User Manual v10.3.X (53-1001357-01, November 2009)

512 DCFM Enterprise User Manual

53-1001357-01

Adding Target Disk LUNs for encryption

The Encryption Target LUNs dialog box lists configured LUNs. The displayed information is different

for disk and tape devices. For example, tape volume and label information is included for tape

devices. Initially, this list is empty.

NOTE

If you are using VMware virtualization software or any other configuration that involves mounted file

systems on the LUN, you must enable first-time encryption when you create the LUN.

You configure a Crypto LUN by adding the LUN to the CryptoTarget container and enabling the

encryption property on the Crypto LUN. You must add LUNs manually. The LUNs of the target which

are not enabled for encryption must still be added to the CryptoTarget container with the Clear Text

encryption mode option.

NOTE

When configuring a LUN with multiple paths, the same LUN policies must be configured on all the

LUN’s paths. If there are multiple paths to the same physical LUNs, then the LUNs are added to

multiple target containers (one target per storage device port). See “Configuring encrypted storage

in a multi-path environment” on page 516 for a multi-path configuration scenario.

1. Select Configure > Encryption from the menu bar.

The Encryption Center dialog box displays.

2. Select the encryption group, switch, or encryption engine containing the storage device to be

configured.

3. Click Encryption Targets.

The Encryption Targets dialog box displays.

4. Select a Target storage device from the list, and click LUNs.

The Encryption Target LUNs dialog box displays. Initially, this list is empty. You must add LUNs

manually.

• Click the Copy Settings button to copy the data from a selected row to the next row.

• Click the Re-keying Details button to launch the LUN Re-keying Details dialog of the

selected LUN. When re-keying is in progress, the re-key completion percentage is updated

automatically, at one minute intervals, until completion.

NOTE

You must configure LUNs on storage devices that are listed in the Targets dialog box for the

host to access them, even if the LUNs are not encrypted.