Fabric OS Encryption Administrator's Guide

70 Fabric OS Encryption Administrator’s Guide
53-1002159-03
Adding target tape LUNs for encryption
2
FIGURE 58 Add Encryption Target Tape LUNs dialog box
5. Select a host from the Host list.
Before you encrypt a LUN, you must select a host, then either discover LUNs that are visible to
the virtual initiator representing the selected host, or enter a range of LUN numbers to be
configured for the selected host.
6. Choose a LUN to be added to an encryption target container using one of the two following
methods:
• Discover. Click to identify the exposed logical unit number for a specified initiator. If you
already know the exposed LUNs for the various initiators accessing the LUN, you can enter
the range of LUNs using the alternative method.
• Enter a LUN number range. Click Show LUNs to add a range of LUNs to be configured for
the selected host. The LUN needed for configuring a Crypto LUN is the LUN that is exposed
to a particular initiator.
7. Select the desired encryption mode. Options are: Native Encryption, DF-Compatible
Encryption, and Cleartext.
• If you change a LUN policy from Native Encryption or DF-Compatible Encryption to Clear
Text, you disable encryption.
• The LUNs of the target that are not enabled for encryption must still be added to the
CryptoTarget container with the Clear Text encryption mode option.
NOTE
The Re-keying interval can only be changed for disk LUNs. For tape LUNs, expiration of the
re-keying interval simply triggers the generation of a new key to be used on future tape
volumes. Tapes that are already made are not re-keyed. To re-key a tape, you need to read the
tape contents using a host application that decrypts the tape contents using the old key, then
rewrite the tape, which re-encrypts the data with the new key.
8. Click OK. The selected tape LUNs are added to the encryption target container.