Fabric OS Encryption Administrator's Guide v6.4.0 (53-1001864-01, June 2010)

228 Fabric OS Encryption Administrator’s Guide
53-1001864-01
resume commands
--resume_rekey
, 149, 206
RKM key management system
, 11
role based access control (RBAC) permissions for
cryptoCfg commands
, 93
S
security processor (SP)
KEK status
, 210
states for encryption engines
, 209
security tab on management application
using to back up a master key
, 86
using to create a master key
, 86
using to restore a master key
, 86
set commands
--set -failback
, 115
--set -keyvault LKM
, 109
show commands
--show
, 116
--show -container
, 124
--show -groupmember
, 111, 112, 123, 181
--show groupmember
, 148
--show -hacluster
, 184, 189
--show -tapepool
, 139
smart cards
configuring
, 16
removing using the management application
, 20
saving to a file
, 20
states
encrypted LUN
, 210
storage encryption
configuration privileges
, 15
configuring
, 50
confirming the configuration status
, 54
selecting the encryption engine for configuration
, 51
selecting the hosts
, 52
specifying a name for the target container
, 52
storage encryption security
privileges for
, 15
switch encryption configuration
confirm configuration using the management
application
, 43
designate switch membership using the management
application
, 41
specify public key certificate filename using the
management application
, 42
switch removal, consequences of
, 84
T
tape compression, 172
tape library media changer considerations
, 176
tape LUN, configuring
, 131
tape metadata
, 171
tape pool
impact of policy changes
, 140
tape pools
, 172
adding
, 89
CommVault Galaxy labeling using the CLI
, 138
configuring
, 137
creating using the CLI
, 139
deleting using the CLI
, 140
description of
, 88
identifying using a name or a number
, 89
labeling rules
, 137
modifying
, 88
modifying using the CLI
, 140
NetBackup labeling using the CLI
, 138
NetWorker labeling using the CLI
, 138
removing
, 88
tape block zero handling
, 172
tape key expiry
, 173
terminology for encryption
, 2
troubleshooting
cfgshow command
, 195
configshow
, 195
cryptocfg --show -groupcfg command
, 195
cryptocfg --show -groupmember command
, 195
errdumpall command
, 195
general encryption using the CLI
, 195
general errors related to the Configure Switch
Encryption wizard
, 203
management application wizard
, 200
nsshow command
, 195
supportsave command
, 195
troubleshooting examples using the CLI
, 198
turn off compression on extension switches
, 176
turn off host-based encryption
, 176
U
user privileges
defined
, 15
resource groups
, 15
using from encryption group properties dialog
, 72