beautypg.com

Brocade Fabric OS Encryption Administrator’s Guide Supporting RSA Data Protection Manager (DPM) Environments (Supporting Fabric OS v7.2.0) User Manual

Page 13

background image

Fabric OS Encryption Administrator’s Guide (DPM)

xi

53-1002922-01

Chapter 6

Maintenance and Troubleshooting 245

In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245

Encryption group and HA cluster maintenance. . . . . . . . . . . . . . . 246

Displaying encryption group configuration
or status information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246
Removing a member node from an encryption group. . . . . . 246
Deleting an encryption group . . . . . . . . . . . . . . . . . . . . . . . . . 249
Removing an HA cluster member . . . . . . . . . . . . . . . . . . . . . . 249
Displaying the HA cluster configuration . . . . . . . . . . . . . . . . . 250
Replacing an HA cluster member . . . . . . . . . . . . . . . . . . . . . . 251
Deleting an HA cluster member . . . . . . . . . . . . . . . . . . . . . . . 253
Performing a manual failback of an encryption engine . . . . 254

Encryption group merge and split use cases . . . . . . . . . . . . . . . . 255

A member node failed and is replaced . . . . . . . . . . . . . . . . . 255
A member node reboots and comes back up . . . . . . . . . . . . 256
A member node lost connection to the group leader . . . . . . 257
A member node lost connection to all other nodes
in the encryption group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 257
Several member nodes split off from an encryption
group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 258
Adjusting heartbeat signaling values . . . . . . . . . . . . . . . . . . . 259
EG split possibilities requiring manual recovery . . . . . . . . . . 260
Configuration impact of encryption group split
or node isolation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 264

Encryption group database manual operations . . . . . . . . . . . . . . 265

Manually synchronizing the encryption group database. . . . 265
Manually synchronizing the security database . . . . . . . . . . . 265
Aborting a pending database transaction . . . . . . . . . . . . . . . 266

Key vault diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266

Measuring encryption performance . . . . . . . . . . . . . . . . . . . . . . . 267

General encryption troubleshooting . . . . . . . . . . . . . . . . . . . . . . . 271

Troubleshooting examples using the CLI . . . . . . . . . . . . . . . . . . . . 274

Encryption Enabled CryptoTarget LUN . . . . . . . . . . . . . . . . . . 274
Encryption Disabled CryptoTarget LUN. . . . . . . . . . . . . . . . . . 275

Management application encryption wizard troubleshooting . . . 276

Errors related to adding a switch to an existing group . . . . . 276
Errors related to adding a switch to a new group . . . . . . . . . 277
General errors related to the Configure Switch
Encryption wizard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278

LUN policy troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279

Loss of encryption group leader after power outage . . . . . . . . . . 280

MPIO and internal LUN states . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281

Suspension and resumption of rekeying operations. . . . . . . 281

FS8-18 blade removal and replacement. . . . . . . . . . . . . . . . . . . . 282

Multi-node EG replacement . . . . . . . . . . . . . . . . . . . . . . . . . . 282
Single-node EG replacement. . . . . . . . . . . . . . . . . . . . . . . . . . 284