Fabric OS Encryption Administrator's Guide

Fabric OS Encryption Administrator’s Guide 247

53-1002159-03

Removing stale rekey information for a LUN

To clean up stale rekey information for a LUN, complete one of the following procedures:

Procedure 1:

1. Modify the LUN policy from “encrypt” to “cleartext” and commit. The LUN will become disabled.

2. Enable the LUN using the following command:

cryptocfg --enable –LUN

2. Modify the LUN policy from “cleartext” to “encrypt” with the enable_encexistingdata command

to enable the first-time encryption, then commit. This will clear the stale rekey metadata on the

LUN and the LUN can be used again for encryption.

Procedure 2:

1. Remove the LUN from the Crypto Target Container and commit.

2. Add the LUN back to the Crypto Target Container with LUN State=”clear-text”, policy=”encrypt”

and “enable_encexistingdata” set for enabling the first-time encryption, then commit. This will

clear the stale rekey metadata on the LUN and the LUN can be used again for encryption.