Brocade Fabric OS Encryption Administrator's Guide v7.1.0 (53-1002721-01, March 2013)

194 Fabric OS Encryption Administrator’s Guide (SKM/ESKM)
53-1002721-01
Thin provisioned LUNs
3
LUN serial number: 50002AC000BC0A50
TP LUN: Yes
LUN connectivity state: Connected
Key ID state: Key ID not Applicable
FabricAdmin:switch> cryptocfg --show -rekey –all
LUN number: 0x0
LUN serial number: 50002AC002E70A50
TP LUN:Yes
Rekey session number: 0
Percentage complete: 98
Rekey state: Read Phase
Rekey role: Primary/Active
Block size: 512
Number of blocks: 4194304
Current LBA: 4141617
FabricAdmin:switch> cryptocfg –-show –LUN tpdisk 0 10:00:00:00:c9:29:0f:01 –
stat
LUN number: 0x0
LUN type: disk
LUN serial number: 50002AC002E70A50
TP LUN:Yes
Encryption mode: encrypt
Encryption format: native
Encrypt existing data: disabled
Rekey: disabled
Internal EE LUN state: Encryption enabled
Encryption algorithm: AES256-XTS
Key ID state: Read write
New LUN: No
Key ID: d3:a6:de:b9:67:26:04:fa:b9:83:e1:c7:cf:ae:f1:9c
Key creation time: Fri Feb 17 03:41:54 2012
Space reclamation
When a block that was provisioned is no longer needed, it can be reclaimed. The Brocade
Encryption Switch supports following methods to reclaim the provisioned blocks:
• Sending the UNMAP SCSI command
• Sending WRITE_SAME SCSI command with only UNMAP bit set.
Note the following limitations:
• Space reclamation is not allowed during rekey.
• The Host will get garbled data while trying to read an unmapped region.
• Because windows host utility “sdelete –c” sends WRITE command with zeros to unmap LBAs,
and which is currently not supported on the Brocade Encryption Switch, this utility will not be
able to unmap LBAs.
• Rekey temporarily uses the last 512 blocks. As a result, these blocks will be marked as
provisioned by the thin provisioned LUN.
• The first 16 blocks of the LUN will be mapped automatically (if it was unmapped), after the LUN
has been configured as an encrypted LUN.