Fabric OS Encryption Administrator's Guide

250 Fabric OS Encryption Administrator’s Guide
53-1002159-03
Security processor KEK status
A
Security processor KEK status
Table 19 lists security processor KEK status information.
Encrypted LUN states
Table 20 lists encrypted LUN states. Table 21 lists LUN states that are specific to tape LUNs.
TABLE 19 Security processor KEK status
KEK type KEK status
1
1. Only valid in the “encryption engine awaiting encryption group” state and the “encryption engine online” state.
Description
Primary KEK (current MK or
primary KV link key)
None Primary KEK is not configured.
Mismatch Primary KEK mismatch between the CP
and the SP.
Match/Valid Primary KEK at CP matches the one in the
SP and is valid.
Secondary KEK (alternate
MK or secondary KV link key)
None Secondary KEK is not configured.
Mismatch Secondary KEK mismatch between the CP
and the SP.
Match/Valid Secondary KEK at CP matches the one in
the SP and is valid.
Group KEK None Group KEK is not configured.
Mismatch Group KEK mismatch between the CP and
the SP.
Match/Valid Group KEK at the CP matches the one in
the SP and is valid.
TABLE 20 Encrypted LUN states
LUN state String displayed
UNKNOWN Unknown
LUN_STATE_UNAVAILABLE LUN state unavailable.
LUN_STATE_INIT Initialize
LUN_DISC_START LUN discovery in progress.
LUN_DISC_COMPLETE LUN discovery complete.
LUN_SETUP_START LUN setup
LUN_CLEAR_TEXT cleartext encryption enabled.
LUN_ENCRYPT Encryption enabled.
LUN_READONLY_1 Read only (found native metadata while LUN is in DF mode).
LUN_READONLY_2 Read only (found DF metadata while LUN is in native mode).
LUN_READONLY_3 Read only (metadata key is in read-only state).
LUN_WR_META_IN_PROG Write metadata is in progress.