Fabric OS Encryption Administrator's Guide

220 Fabric OS Encryption Administrator’s Guide
53-1002159-03
Encryption group merge and split use cases
6
…Output truncated…
4. Go to every other encryption group island to delete the encryption group.
NOTE
If you have four encryption nodes that have split into a pair of two node encryption groups,
refer to “The 2:2 EG split exception” on page 220 for a description of an additional step to take
before deleting the encryption group.
In this example, the encryption group island consists only of Node181. From Node181, enter
the following command:
Node181:admin->cryptocfg --delete -encgroup <ENTER EG GROUP NAME HERE>
This will permanently delete the encryption group configuration
ARE YOU SURE (yes, y, no, n): [no] yes
WARNING: Tape, HA cluster or Container is configured in this node.
Do you want to do EG deletion and retain Tape, HA cluster or Container
configuration
ARE YOU SURE (yes, y, no, n): [no] yes
Encryption group delete status: Operation Succeeded.
If you now perform a cryptocfg --show -groupcfg you will see that no encryption group on
Node181 is defined:
Node181:admin->cryptocfg --show -groupcfg
Encryption group not defined: Cluster DB and Persistent DB not present, No
Encryption Group Created or Defined.
The 2:2 EG split exception
The encryption group deletion procedure may be done directly in every scenario except when
there has been a 2:2 split. In that special case, the other encryption group island consists of
one group leader and one member node. The group leader node has taken over the group
leader role, and has been successful in contacting one member node, placing the member
node in a DEF_NODE_STATE_DISCOVERED state. Before you can delete the encryption group,
you must eject the discovered member node from the group leader node (EGisland2GLNode in
the command example that follows). To determine which node is the discovered member node
that needs to be ejected, use the following command:
EGisland2GLNode:admin-> cryptocfg --show -groupmember -all
NODE LIST
Total Number of defined nodes: 4
Group Leader Node Name: 10:00:00:05:1e:54:22:44
Encryption Group state: CLUSTER_STATE_DEGRADED
…. Output truncated…
Node Name: 10:00:00:05:1e:c1:9b:91
State: DEF_NODE_STATE_DISCOVERED
…Output truncated…