Cisco MDS 9000 Family Storage Media Encryption Configuration Guide - Release 4.x (OL-18091-01, February 2009)

Send documentation comments to [e-mail]
8-2
Cisco MDS 9000 Family Storage Media Encryption Configuration Guide
OL-18091-01, Cisco MDS NX-OS Release 4.x
Chapter 8 Cisco SME Best Practices
Overview of Best Practices
• Refer to the Cisco Storage Media Encryption Design Guide for guidelines on sizing and placements
of Cisco SME interfaces.
Cisco KMC Practices
• As your data storage grows, the number of tape keys will also grow over time. This is especially the
case when you select the unique key mode. It is a good practice to store only active keys in the
Cisco
KMC database.
• To ensure redundancy and availability, it is important to back up your Cisco KMC database
regularly.
• The Cisco KMC listens for key updates and retrieves requests from switches on a TCP port. The
default port is 8800; however, the port number can be modified in the smeserver.properties file.
Note For more information, refer to the Storage Media Encryption Key Management White Paper.
Fabric Management Practices
Use Fabric Manager and Device Manager to proactively manage your fabric and detect possible
problems before they become critical.
Note For details on SME sizing and topology guidelines and case studies, refer to the Cisco Storage Media
Encryption Design Guide.