Brocade Fabric OS Encryption Administrator’s Guide Supporting RSA Data Protection Manager (DPM) Environments (Supporting Fabric OS v7.2.0) User Manual
Page 13
Fabric OS Encryption Administrator’s Guide (DPM)
xi
53-1002922-01
Maintenance and Troubleshooting 245
Encryption group and HA cluster maintenance. . . . . . . . . . . . . . . 246
Displaying encryption group configuration
or status information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246
Removing a member node from an encryption group. . . . . . 246
Deleting an encryption group . . . . . . . . . . . . . . . . . . . . . . . . . 249
Removing an HA cluster member . . . . . . . . . . . . . . . . . . . . . . 249
Displaying the HA cluster configuration . . . . . . . . . . . . . . . . . 250
Replacing an HA cluster member . . . . . . . . . . . . . . . . . . . . . . 251
Deleting an HA cluster member . . . . . . . . . . . . . . . . . . . . . . . 253
Performing a manual failback of an encryption engine . . . . 254
Encryption group merge and split use cases . . . . . . . . . . . . . . . . 255
A member node failed and is replaced . . . . . . . . . . . . . . . . . 255
A member node reboots and comes back up . . . . . . . . . . . . 256
A member node lost connection to the group leader . . . . . . 257
A member node lost connection to all other nodes
in the encryption group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 257
Several member nodes split off from an encryption
group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 258
Adjusting heartbeat signaling values . . . . . . . . . . . . . . . . . . . 259
EG split possibilities requiring manual recovery . . . . . . . . . . 260
Configuration impact of encryption group split
or node isolation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 264
Encryption group database manual operations . . . . . . . . . . . . . . 265
Manually synchronizing the encryption group database. . . . 265
Manually synchronizing the security database . . . . . . . . . . . 265
Aborting a pending database transaction . . . . . . . . . . . . . . . 266
Key vault diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266
Measuring encryption performance . . . . . . . . . . . . . . . . . . . . . . . 267
General encryption troubleshooting . . . . . . . . . . . . . . . . . . . . . . . 271
Troubleshooting examples using the CLI . . . . . . . . . . . . . . . . . . . . 274
Encryption Enabled CryptoTarget LUN . . . . . . . . . . . . . . . . . . 274
Encryption Disabled CryptoTarget LUN. . . . . . . . . . . . . . . . . . 275
Management application encryption wizard troubleshooting . . . 276
Errors related to adding a switch to an existing group . . . . . 276
Errors related to adding a switch to a new group . . . . . . . . . 277
General errors related to the Configure Switch
Encryption wizard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278
LUN policy troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279
Loss of encryption group leader after power outage . . . . . . . . . . 280
MPIO and internal LUN states . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281
Suspension and resumption of rekeying operations. . . . . . . 281
FS8-18 blade removal and replacement. . . . . . . . . . . . . . . . . . . . 282
Multi-node EG replacement . . . . . . . . . . . . . . . . . . . . . . . . . . 282
Single-node EG replacement. . . . . . . . . . . . . . . . . . . . . . . . . . 284