Cisco MDS 9000 Family Storage Media Encryption Configuration Guide - Release 4.x (OL-18091-01, February 2009)

Send documentation comments to mdsfeedback-doc@cisco.com
x
Cisco MDS 9000 Family Storage Media Encryption Configuration Guide
OL-18091-01, Cisco MDS NX-OS Release 4.x
New and Changed Information
Auto replication of
media keys
Remote replication
relationship settings
available.
A remote replication relationship
can be set between volume groups.
Cisco SME allows you to
automatically replicate the media
keys from one Cisco SME cluster to
one or more clusters.
4.1(3) Chapter 6, “Cisco SME
Key Management”
Troubleshooting
scenarios
Two troubleshooting scenarios
added.
4.1(3) Chapter 9, “Cisco SME
Troubleshooting”
Migrating Cisco SME
database tables
A database migration utility
transfers the contents from one
database to another.
4.1(3) Appendix G, “Migrating
Cisco SME Database
Tables
Host names are
accepted as server
addresses
You can enter IP addresses or host
names for the servers.
4.1(3) Chapter 4, “Cisco SME
Cluster Management”
Chapter 6, “Cisco SME
Key Management”
RKM Migration
procedure
Procedure to migrate from Cisco
KMC to RKM is explained.
4.1(1c) Appendix D, “RSA Key
Manager and Cisco SME”
Software change As of Release 4.1(1b) and later, the
MDS SAN-OS software is changed to
MDS NX-OS software. The earlier
releases are unchanged and all
refrerences are retained.
4.1(1c) All chapters
Cisco SME roles Added the Cisco Storage
Administrator and Cisco SME
KMC Administrator roles.
4.1(1c) Chapter 1, “Product
Overview”
Key Management The Cisco KMC can be separated
from Fabric Manager for multisite
deployments.
4.1(1c) Chapter 1, “Product
Overview”
FC-Redirect and CFS
Regions
Support for CFS Regions and Cisco
SME available.
4.1(1c) Chapter 2, “Getting
Started”
Migrating KMC
Server
KMC server can be migrated. 4.1(1c) Chapter 6, “Cisco SME
Key Management”
Key Manager Settings A new option ‘None’ is
added to the Key
Manager Settings page
in the Fabric Manager
web client.
A key manager needs to be selected
before configuring Cisco SME.
There are three options for key
manager available now.
4.1(1c) Chapter 2, “Getting
Started”
feature command Use the feature command to enable
or disable Cisco SME feature.
4.1(1c) Appendix A, “SME
Commands”
Generating and
Installing Self-Signed
Certificates
How to configure SSL when KMC
is separated from Fabric Manager
Server.
4.1(1c) Appendix C,
“Provisioning Self-Sign
Certificates”
Table 1 New and Changed Features for Cisco Storage Media Encryption (continued)
Feature GUI Change Description
Changed
in
Release Where Documented