Fabric OS Encryption Administrator's Guide v6.4.0 (53-1001864-01, June 2010)

96 Fabric OS Encryption Administrator’s Guide
53-1001864-01
Cryptocfg Help command output
3
Cryptocfg Help command output
All encryption operations are done using the cryptocfg command. The cryptocfg command has an
help output that lists all options.
switch:admin> cryptocfg --help
Usage: cryptocfg
--help -nodecfg:
Display the synopsis of node parameter configuration.
--help -groupcfg:
Display the synopsis of group parameter configuration.
--help -hacluster:
Display the synopsis of hacluster parameter configuration.
--help -devicecfg:
Display the synopsis of device container parameter configuration.
--help -transcfg:
Display the synopsis of transaction management.
--help -decommission:
Display the synopsis of decommissioning a lun.
switch:admin> cryptocfg --help -nodecfg
Usage: cryptocfg
--help -nodecfg:
Display the synopsis of node parameter configuration.
--initnode:
Initialize the node for configuration of encryption options.
--initEE [<slotnumber>]:
Initialize the specified encryption engine.
--regEE [<slotnumber>]:
Register a previously initialized encryption blade.
--setEE [<slotnumber>] -routing <shared | partitioned>:
Set encryption routing policy.
--reg -membernode <member node WWN> <member node certfile> <IP addr>:
Register a member node with the system.
--reg -groupleader <group leader WWN> <group leader certfile> <IP addr>:
Register a group leader node with the system.
--dereg -membernode <member node WWN>:
Deregister a member node with the system.
--reg -systemcard [<slotnumber>] <cert label> <certfile>:
Register a system card with the system.
--dereg -systemcard [<slotnumber>]:
Deregister a system card with the system.
--dhchallenge <vault IP addr>:
Generates the Diffie-Hellman challenge passed from the
EE to the specified NetApp LKM.
--dhresponse <vault IP addr>:
Accepts the LKM Diffie-Hellman response from the NetApp
LKM and generates the Link Key on the specified EE.
--disableEE [<slotnumber>]:
This command reboots the Mace switch or power cycle the Lance blade in case of
chassis system.
--enableEE [<slotnumber>]:
Enables the system to perform encryption.
--zeroizeEE [<slotnumber>]:
Zeroize all critical security parameter.
--import -scp <local name> <host IP> <host username> <host path>:
Import a file from an external host via scp.
--import -usb <dest filename> <source filename>:
Import a file from a mounted USB storage device.