Fabric OS Encryption Administrator's Guide v6.4.0 (53-1001864-01, June 2010)

Fabric OS Encryption Administrator’s Guide 75

53-1001864-01

Disk device decommissioning

A disk device needs to be decommissioned when any of the following occur:

• The storage lease expires for an array, and devices must be returned or exchanged.

• Storage is reprovisioned for movement between departments.

• An array or device is removed from service.

In all cases, all data on the disk media must be rendered inaccessible. Device decommissioning

deletes all information that could be used to recover the data.

When a device decommission operation fails on the encryption group leader for any reason, the

crypto configuration remains uncommitted until a user-initiated commit or a subsequent device

decommission operation issued on the encryption group leader completes successfully. Device

decommission operations should always be issued from a committed configuration. If not, the

operation will fail with the error message An outstanding transaction is pending in Switch/EG. IF

this happens, you can resolve the problems by committing the configuration from the encryption

group leader.

Provided that the crypto configuration is not left uncommitted because of any crypto configuration

changes or a failed device decommission operation issued on a encryption group leader node, this

error message will not be seen for any device decommission operation issued serially on an

encryption group member node. If more than one device decommission operation is tried in an

encryption group from member nodes simultaneously, then this error message is transient and will

go away after device decommission operation is complete. If the device decommissioning

operation fails, retry the operation after some time has passed.

Decommissioning LUNs

Use the following procedure to decommission a LUN.

1. Select Configure > Encryption from the menu bar.

The Encryption Center dialog box displays.

2. Select the encryption group, switch, or encryption engine containing the storage device or

devices to be decommissioned.

3. Select Encryption Targets.

The Encryption Targets dialog box displays.

4. Select a Target storage device from the list, and click LUNs.

The Encryption Target LUNs dialog box displays.

5. Select the LUNs associated with the device, and click the Decommission button.

A Warning message displays.

6. Click Yes to proceed with decommissioning.

If a re-key operation is currently in progress on a selected LUN, a message is displayed that

gives you a choice of doing a Forced Decommission, or to Cancel and try later after the re-key

operation is complete.

7. To check on the progress of the decommissioning operation, click Refresh. When

decommissioning is complete, the LUNs are removed from the Encryption Target LUNs dialog

box.