Fabric OS Encryption Administrator's Guide v6.4.0 (53-1001864-01, June 2010)

116 Fabric OS Encryption Administrator’s Guide
53-1001864-01
Enabling the encryption engine
3
Enabling the encryption engine
Enable the encryption engine by entering the cryptocfg --enableEE command. Provide a slot
number if the encryption engine is a blade.
NOTE
Every time a Brocade Encryption Switch or DCX or DCX-4S chassis containing one or more
FS8-18 blade goes through power cycle event, or after issuing slotpoweroff <slot number>
followed by slotpoweron <slot number> for an FS8-18 blade in DCX or DCX-4S Chassis, the
encryption engine must be enabled manually by the Security Administrator. Hosts cannot
access the storage LUNs through the storage paths exposed on this Brocade Encryption Switch
or FS8-18 blade until the encryption engine is enabled. The encryption engine state can
viewed using the cryptocfg --show -localEE command, or by displaying switch or blade
properties from DFCM. An encryption engine that is not enabled indicates Waiting for Enable
EE.
SecurityAdmin:switch>cryptocfg --enableEE
Operation succeeded.
Checking encryption engine status
You can verify the encryption engine status at any point in the setup process and get information
about the next required configuration steps or to troubleshoot an encryption engine that behaves in
unexpected ways. Use the cryptocfg --show -localEE command to check the encryption engine
status.
SecurityAdmin:switch> cryptocfg --show -localEE
EE Slot: 1
SP state: Online
Primary Link KeyID: 85:1c:ca:dd:fc:8c:31:fc:87:21:26:d1:24:a0:92:be
Secondary Link KeyID: 98:4f:b4:98:c0:42:ab:6b:6d:65:ba:f2:fc:aa:b5:8a
HA Cluster Membership: mace40_dcx74_1
EE Attributes:
Link IP Addr : 10.32.72.75
Link GW IP Addr : 10.32.64.1
Link Net Mask : 255.255.240.0
Link MAC Addr : 00:05:1e:53:8d:cd
Link MTU : 1500
Link State : UP
Media Type : DISK/TAPE
Rebalance Recommended: NO
System Card Label :
System Card CID :
Remote EE Reachability :
Node WWN/Slot EE IP Addr EE State IO Link State
10:00:00:05:1e:54:22:36/0 10.32.72.62 EE_STATE_ONLINE Reachable
10:00:00:05:1e:47:30:00/1 10.32.72.104 EE_STATE_ONLINE Reachable
10:00:00:05:1e:47:30:00/3 10.32.72.105 EE_STATE_ONLINE Reachable
10:00:00:05:1e:47:30:00/10 10.32.72.106 EE_STATE_ONLINE Reachable
10:00:00:05:1e:47:30:00/12 10.32.72.107 EE_STATE_ONLINE Reachable
EE Slot: 2
SP state: Online
Primary Link KeyID: 85:1c:ca:dd:fc:8c:31:fc:87:21:26:d1:24:a0:92:be
Secondary Link KeyID: 98:4f:b4:98:c0:42:ab:6b:6d:65:ba:f2:fc:aa:b5:8a
No HA cluster membership
EE Attributes: