Fabric OS Encryption Administrator's Guide

256 Fabric OS Encryption Administrator’s Guide
53-1002159-03
cryptocfg command
--add -haclustermember
, 139
--add -initiator
, 150, 158, 168
--add -LUN
, 155, 168, 170, 171
--commit
, 211
--create -container
, 149, 158, 167
--create -encgroup
, 128
--create -hacluster
, 138
--create -tapepool
, 164
--delete -container
, 152, 206
--delete -encgroup
, 208
--delete -hacluster
, 211
--delete -tapepool
, 165
--dereg -membernode
, 207
--discover -LUN
, 168
--discoverLUN
, 154, 158
--eject -membernode
, 207
--enable -LUN
, 162
--enable -rekey
, 171
--enable_rekey
, 170
--enableEE
, 143, 214
--export
, 133
--exportmasterkey
, 135
--failback -EE
, 212
--genmasterkey
, 135
--import
, 128, 133
--initEE
, 127, 214
--initnode
, 126, 214
--manual _rekey
, 172
--modify -LUN
, 160, 170, 171
--modify -tapepool
, 165
--move -container
, 153
--reg -keyvault
, 129
--reg -membernode
, 134, 214
--regEE
, 127, 214
--rem -haclustermember
, 206
--rem -LUN
, 159, 237
--remove -haclustermember
, 208
--remove -initiator
, 151
--replace -haclustermember
, 209, 210
--replaceEE
, 206, 214
--resume_rekey
, 174, 236
--set -failback
, 140
--set -keyvault LKM
, 129
--show
, 134, 143
--show -container
, 150
--show -groupmember
, 134, 135, 136, 149, 172, 207
--show -hacluster
, 208, 212
--show -tapepool
, 165
--zeroize
, 126
cryptoCfg commands, permissions for
, 113
CryptoTarget container
adding a LUN
, 154
configuring
, 147
creating
, 149
deleting
, 152
discovering a LUN
, 153
moving
, 153
removing a LUN
, 159
removing an initiator from
, 151
D
data re-keying, 170
DEK (data encryption keys)
, 9
DEK life cycle
, 10
delete commands
--delete -container
, 152, 206
--delete -encgroup
, 208
--delete -hacluster
, 211
--delete -tapepool
, 165
deployment scenarios
deployment as part of an edge fabric
, 185
deployment in fibre channel routed fabrics
, 183
deployment with FCIP extension switches
, 186
dual fabric deployment
, 179
single fabric deployment
, 177, 178
deployment with admin domains (AD)
, 199
deregister command,--dereg -membernode
, 207
DHCP for IP interfaces
, 199
discover commands
--discover -LUN
, 168
--discoverLUN
, 154, 158
disk metadata
, 195
E
eject commands
-eject -membernode
, 207
enable a disabled LUN using the CLI
, 195
enable commands
--enable -LUN
, 162
--enable -rekey
, 171
--enable_rekey
, 170
--enableEE
, 214
enableEE
, 143
encrypted LUN states
, 250