HP StorageWorks C-Series Fabric Switches for SAN-OS 3.3(3) and FabricWare 2.1(3) Release Notes (AA-RWEHT-TE, April 2009)

12 MDS Multilayer Director & Multilayer Fabric Switches Release Notes
Cisco MDS 9000 Storage Media Encryption (SME)
Overview
The SME solution is a comprehensive network-integrated encryption service with enterprise-class
key management that works transparently with existing and new SANs. The innovative network-
integrated solution has numerous advantages over competitive solutions available today:
• SME installation and provisioning are both simple and non-disruptive. Unlike other
solutions, SME does not require rewiring or SAN reconfiguration.
• Encryption engines are integrated on the MDS 9000 18/4-port Multiservice Module
(MSM-18/4) and the MDS 9222i Multiservice Fabric Switch, eliminating the need to
purchase and manage extra switch ports, cables, and applications.
• Traffic from any virtual SAN (VSAN) can be encrypted using SME, enabling flexible,
automated load balancing through network traffic management across multiple SANs.
• No additional software is required for provisioning, key, and user role management; SME
is integrated into Cisco Fabric Manager, therefore reducing operating expenses.
Features
SME is a standards-based encryption solution for heterogeneous tape libraries and virtual tape
libraries. SME is managed with Cisco Fabric Manager Web Client and a command-line interface
(CLI) for unified SAN management and security provisioning. SME includes the following
comprehensive built-in key management features:
• Transparent Fabric Service
• Encryption
• SME Roles
• Key Management
• Clustering
• FC Redirect
• Server Based Discovery for Provisioning Tapes
Hardware Requirements
SME requires at least one MDS 9222i switch or MSM-18/4 module in each cluster. The SME
engines on the required modules provide the transparent encryption and compression services to
the hosts and storage devices. To take full advantage of the standard and advanced security levels,
a smart card reader is required.
Software Requirements
All MDS switches in the SME cluster must be running the current release of Fabric Manager and
SAN-OS software. This includes the following:
• The Fabric Manager Web Client must be running Fabric Manager 3.2(3) or newer
• The MDS switches attached to the tape devices must be running SAN-OS Release 3.2(3)
or newer
• All MDS 9222i switches and switches that include MSM-18/4 modules must be running
SAN-OS Release 3.2(3) software or newer
For additional information on how to install SME refer to the Cisco MDS 9000 Family Storage
Media Encryption Configuration Guide.