Reference (Supporting Fabric OS v7.3.0) Owner manual

Fabric OS Command Reference 231
53-1003131-01
cryptoCfg
2
• All nodes in the encryption group must run Fabric OS v6.4.0 or later when keyvault type is set to
DPM or LKM.
• Device decommissioning does not work across a reboot. Rebooting terminates an ongoing
decommissioning process and the command must be reissued after completing the reboot.
• Device decommissioning is supported with the DPM, TKLM, KMIP, ESKM, TEKA, and LKM key
vaults.
• Decommissioning of tape devices or snap drive volumes is currently no supported.
• Decommissioning does not automatically delete the keys. You must manually delete the keys from
the key vault to complete the operation.
OPERANDS This command has the following operands:
--help -decommission
Displays the command usage help for the device decommissioning commands.
--decommission
Decommissions a disk LUN hosted in a specified container as seen from the
initiator. You must issue this command from the node that hosts the container.
Upon successful completion of a decommissioning operation, the LUN is deleted
from all the containers hosting it. All active paths to the LUN are lost; there is no
need to execute a decommissioning operation separately for each path
associated with the LUN. A commit operation is not required. The following
operands are required:
-container container_name
Specifies the name of the container that hosts the LUN.
-initiator initiatator_PWWN
Specifies the initiator port WWN.
-LUN LUN_num
Specifies the number of the LUN to be decommissioned.
--delete -decommissionedkeyids
Purges all key IDs associated with decommissioned LUNs from the internal
cache. You must delete the keys manually from the key vaults before purging the
cache.
--show -decommissionedkeyids
Displays the key IDs associated with decommissioned LUNs.
--show -vendorspecifickeyid key_ID
Displays vendor specific key_ID or UUID for a given key_ID.
EXAMPLES The following steps must be performed to decommission a disk LUN:
1. Execute the decommission operation on a LUN
switch:admin> cryptocfg --decommission -container disk_ct0 \
-initiator 21:01:00:1b:32:29:5d:1c -LUN 0
Operation succeeded.