Brocade Fabric OS Documentation Updates - Supporting Fabric OS v7.0.x (53-1002165-05, March 2012)

Fabric OS Documentation Updates 17
53-1002165-05
Documentation updates for RKM
6
Chapter 5, Best Practices and Special Topics
Key Vault Best Practices
• When encrypted disk LUNs are to be configured or moved to an Encryption Group that uses a
different key vault, make sure to decommission the encrypted LUNs from the old Encryption
Group.
Chapter 6, Maintenance and Troubleshooting
Manually synchronizing the security database
This operation can resolve problems with master key propagation (and connectivity issues between
peer node encryption engines in an encryption group). The synchronization occurs every time this
command is executed regardless of whether or not the security database was synchronized across
all nodes in the encryption group.
Use the - -sync -securitydb command to distribute the security database from the group leader
node to all member nodes. This command is valid only on the group leader.
In scenarios where this master key propagation issue still persists, exporting the master key to a
file and recovering it resolves the issue. To do this, use the following commands:
• Use the cryptocfg --exportmasterkey -file option to export the master key to a file.
• Use the cryptocfg --recovermasterkey currentMK -srcfile to recover the master key.