Fabric OS Encryption Administrator's Guide

Fabric OS Encryption Administrator’s Guide 211

53-1002159-03

Encryption group and HA cluster maintenance

Case 2: Replacing a “live” encryption engine in an HA cluster

1. Invoke the cryptocfg --replace -haclustermember command on the group leader to replace the

live encryption engine EE2 with another encryption engine (EE3). This operation effectively

removes EE2 from the HA cluster and adds the replacement encryption engine (EE3) to the HA

cluster. The target associations (T2) from the replaced encryption engine (EE2) are transferred

to the replacement encryption engine (EE3).

2. Commit the transaction.

3. Invoke the cryptocfg

--reclaimWWN -EE command on the group leader followed by WWN of the

DCX/DCX-4S and the slot number of the failed encryption engine.

4. Invoke the cryptocfg

--commit command to sync the configuration in the encryption group.

5. Remove the encryption engine EE2 from the encryption group

FIGURE 111 Replacing a “live” encryption engine in an HA cluster.

Deleting an HA cluster member

This command dissolves the HA cluster and removes failover capability from the participating

encryption engines.

1. Log into the group leader as Admin or SecurityAdmin.

2. Enter the cryptocfg

--delete -hacluster command. Specify the name of the HA cluster you wish

to delete.

SecurityAdmin:switch>cryptocfg --delete -hacluster HAC1

Delete HA cluster status: Operation succeeded.

3. Enter the cryptocfg --commit command to commit the transaction.