Reference (Supporting Fabric OS v7.3.0) Owner manual

Fabric OS Command Reference 191
53-1003131-01
cryptoCfg
2
manual
Enables manual failback. In this mode, failback must be initiated manually after an
encryption switch or blade that failed earlier has been restored or replaced.
--set -hbmisses
Sets the number of heartbeat misses allowed in a node that is part of an
encryption group before the node is declared unreachable. This value is set in
conjunction with the time-out value. It must be configured at the group leader node
and is distributed to all member nodes in the encryption group. The following
operand is required:
value
Specifies the number of heartbeat misses. The default value is 3. The range is 1
to 15 in integer increments only.
--set -hbtimeout
Sets the time-out value for the heartbeat. This parameter must be configured at
the group leader node and is distributed to all member nodes in the encryption
group. The following operand is required:
value
Specifies the heartbeat time-out in seconds. The default value is 2 seconds. Valid
values are integers in the range between 1 and 30 seconds.
--set -quorumsize
Sets the quorum size used to authenticate functions that require a quorum of
authentication cards. The default value is zero. You can set the quorum size only if
the current value is zero. Note that this value is different from the recovery set size
that specifies the number of recovery shares used to perform Master Key
recovery. When quorum authentication is enabled (Quorum Size is > 0), this
operation requires authentication of a quorum of authentication cards.
value
Specifies the quorum size. Valid values are 0 (quorum authentication is disabled)
and 1 through 5 (quorum authentication is enabled). This operand is required.
--set -systemcard> enable | disable
Enables or disables the system card usage policy. When the policy is enabled, a
system card is required to be inserted in an encryption engine to enable
encryption after a power-cycle event. When quorum authentication is enabled
(Quorum Size is > 0), this operation requires authentication of a quorum of
authentication cards. The policy is disabled by default. This command must be
executed on the group leader.
--set -replication enable | disable
Enables or disables replication-specific features. You must enable replication
before you can use replication-specific features such as the -newLUN,
-include_mirror, or the --refreshDEK command. Replication is disabled by
default; it must be enabled on the group leader. This command is supported only
for the DPM key vault.
--add -membernode
Adds the specified member node to the existing encryption group. The member
node is specified by its node WWN. This command is valid only on the group
leader. Initial setup on the node must be performed prior to adding the node to an
encryption group.