Fabric OS Documentation Updates Supporting Fabric OS v7.0.x

Fabric OS Documentation Updates 43
53-1002165-10
Documentation updates for RKM
7
Failover/failback policy configuration
A correction has been made to heartbeat values for the following:
• Heartbeat misses—The range is 3-14 in integer increments only.
• Heartbeat timeout—The range is 2-9 seconds in integer increments only.
Chapter 5, Best Practices and Special Topics
Key Vault Best Practices
• When encrypted disk LUNs are to be configured or moved to an Encryption Group that uses a
different key vault, make sure to decommission the encrypted LUNs from the old Encryption
Group.
Chapter 6, Maintenance and Troubleshooting
Manually synchronizing the security database
This operation can resolve problems with master key propagation (and connectivity issues between
peer node encryption engines in an encryption group). The synchronization occurs every time this
command is executed regardless of whether or not the security database was synchronized across
all nodes in the encryption group.
Use the - -sync -securitydb command to distribute the security database from the group leader
node to all member nodes. This command is valid only on the group leader.
In scenarios where this master key propagation issue still persists, exporting the master key to a
file and recovering it resolves the issue. To do this, use the following commands:
• Use the cryptocfg --exportmasterkey -file option to export the master key to a file.
• Use the cryptocfg --recovermasterkey currentMK -srcfile to recover the master key.
Command name User Admin Operator Switch
Admin
Zone
Admin
Fabric
Admin
Basic
Switch
Admin
Security
Admin
Admin Domain
enable
NOMNNNOMN ODisallowed
kvdiag
NOMNNNO N OMDisallowed
reclaim
NOMNNNO N OMDisallowed
remove -haclustermember
NOMNNNO N OM
show -file -all
NOMNNNO N OM