DCFM Enterprise User Manual (53-1001775-01, June 2010)

556 DCFM Enterprise User Manual
53-1001775-01
Adding Target Tape LUNs for encryption
20
• The New LUN option is used only if an RKM key vault is configured for the encryption group.
• The New LUN option can be used only if replication is enabled for the encryption group.
• If the local LUN contains host data, configuring it with the New LUN option would cause the
data on the last 3 blocks of the LUN to be lost. Before using the New LUN option, you must
migrate the contents of the LUN to another LUN that is larger by at least 3 blocks. The new
larger LUN can then used when creating the SRDF pair. The remote LUN of the SRDF pair must
be of the same size. The original smaller LUN with user data can be decommissioned.
Adding Target Tape LUNs for encryption
You configure a Crypto LUN by adding the LUN to the CryptoTarget container and enabling the
encryption property on the Crypto LUN. You must add LUNs manually. After you add the LUNs, you
must specify the encryption settings.
When configuring a LUN with multiple paths, the same LUN policies must be configured on all the
LUN’s paths. If there are multiple paths to the same physical LUNs, then the LUNs are added to
multiple target containers (one target per storage device port). See “Configuring encrypted tape
storage in a multi-path environment” on page 557 for a multi-path configuration scenario.
1. Select Configure > Encryption from the menu bar.
The Encryption Center dialog box displays.
2. Select the encryption group, switch, or encryption engine containing the storage device to be
configured.
3. Click Encryption Targets.
The Encryption Targets dialog box displays.
4. Select a Target storage device from the list, and click LUNs.
The Encryption Target LUNs dialog box displays.
5. Click Add.
The Add Encryption Target Tape LUNs dialog box displays.
This dialog box includes a table of all LUNs in the storage device that are visible to hosts. LUNs
are identified by the Host world wide name, LUN number, and Volume Label Prefix number.
6. Select a host from the Host list.
Before you encrypt a LUN you must select a host and then either discover LUNs that are visible
to the virtual initiator representing the selected host, or enter a range of LUN numbers to be
configured for the selected host.
7. Choose a LUN to be added to an encryption target container using one of the two following
methods:
• Discover. Click to identify the exposed logical unit number for a specified initiator. If you
already know the exposed LUNs for the various initiators accessing the LUN, you can enter
the range of LUNs using the alternative method.
• Enter a LUN number range. Click to add a range of LUNs to be configured for the selected
host. The LUN needed for configuring a Crypto LUN is the LUN that is exposed to a
particular initiator.