Deployment Guide

Fabric OS Command Reference 201
53-1003131-01
cryptoCfg
2
--add -haclustermember
Adds one or more encryption engine members to an already configured HA. A
maximum of two HA cluster members is currently supported. The EEs must be
part of the same encryption group as the node on which this command is issued.
This command is valid only on the group leader. The encryption engines must
belong to different switches or chassis. This rule is enforced by the CLI to ensure
redundancy.
The following operands are required with the --add command:
node_WWN
Specifies the node WWN of the switch or chassis to which the encryption engine
belongs.
slot
Specifies the encryption engine slot number on bladed systems.
--remove -haclustermember
Removes one or both encryption engine members from an already configured HA
cluster. This command is valid only on the group leader. This command only
removes the failover/failback capability for the removed EEs; it does not affect the
relationship between configured CryptoTarget containers and the encryption
engine that is removed from the HA cluster. The containers still belong to this
encryption engine and encryption operations continue.
The following operands are required with the --remove command:
node_WWN
Specifies the WWN of the switch or chassis to which the encryption engine
belongs.
slot
Specifies the encryption engine slot number on bladed systems.
--replace -haclustermember
Replaces an encryption engine, either failed or alive, with an alternate encryption
engine. All target associations for the current encryption engine are transferred
over to the alternate encryption engine when this command is executed. The
alternate encryption engine does not have to be part of the current HA cluster.
Upon successful replacement, the alternate encryption engine automatically
becomes part of the configured HA cluster and disrupted peer relationships are
repaired. This command is only valid on the group leader.
The following operands are supported with the --replace command:
HA_cluster_name
Specifies the HA cluster member to be replaced. The HA cluster name must be
specified when this operand is used. This operand is optional. It is not needed if
the encryption engine to be replaced is not part of an HA cluster.
current_node_WWN [slot
Specifies the WWN of the encryption engine to be replaced. This operand is
required. On bladed systems, include the encryption engine slot number.
new_node_WWN [slot]
Specifies the WWN of the encryption engine that is to replace the current
encryption engine. This operand is required. On bladed systems, include the
encryption engine's slot number.