Data Center Fabric Manager Enterprise User Manual v10.3.X (53-1001357-01, November 2009)

526 DCFM Enterprise User Manual
53-1001357-01
Creating a new master key
16
10. Insert the next card, and repeat step 8 and step 9.
11. Continue until all the cards in the set have been read.
12. Click OK.
Creating a new master key
Though it is generally not necessary to create a new master key, you may be required to create one
due to circumstances such as the following:
• The previous master key has been compromised.
• Corporate policy might require a new master key every year for security purposes.
When you create a new master key, the former active master key automatically becomes the
alternate master key.
The new master key cannot be used (no new data encryption keys can be created, so no new
encrypted LUNs can be configured), until you back up the new master key. After you have backed
up the new master key, it is strongly recommended that all encrypted disk LUNs be re-keyed.
Re-keying causes a new data encryption key to be created and encrypted using the new active
master key, thereby removing any dependency on the old master key.
1. Select Configure > Encryption.
2. Select an encryption group from the tree and click Properties.
3. Select the Security tab.
4. Select Create a New Master Key from the list.
The Confirm Master Key Creation dialog box displays.
FIGURE 229 Confirm master key creation dialog box
5. Read the information, and click Yes to proceed.