Brocade Fabric OS Encryption Administrator’s Guide Supporting HP Secure Key Manager (SKM) and HP Enterprise Secure Key Manager (ESKM) Environments (Supporting Fabric OS v7.2.0) User Manual
Page 132
112
Fabric OS Encryption Administrator’s Guide (SKM/ESKM)
53-1002923-01
Viewing and editing switch encryption properties
2
•
need master/link key
•
Online
-
Set State To: Identifies if the state is enabled or disabled. You can click the line item in the
table to change the value, then click OK to apply the change.
-
Total Targets: The number of encrypted target devices.
-
HA Cluster Peer: The name and location of the high-availability (HA) cluster peer (another
encryption engine in the same group), if in an HA configuration. If no peer is configured, No
Peer is displayed.
-
HA Cluster Name: The name of the HA cluster (for example, Cluster1), if in an HA
configuration. HA cluster names can have up to 31 characters. Letters, digits, and
underscores are allowed.
-
Media Type: The media type of the encryption engine. Options are Disk and Tape, or
Disk/Tape when both are present.
-
Re-Balance Recommended: Indicates if LUN rebalancing is recommended for an
encryption engine that is hosting both disk and tape LUNs. Options are Yes and No.
-
System Card Status: The current status of system card information for the encryption
engine. Options are Enabled and Disabled.
Exporting the public key certificate signing request (CSR) from
properties
To export the CSR under Public Key Certificate Request, complete the following steps.
1. Click Export, then browse to the location where you want to save the certificate and click Save.
Alternatively, you may also copy the CSR and paste it to a file.
2. Submit the CSR to a certificate authority (CA) for signing. CA signing requirements and
procedures differ per key manager appliance.
Importing a signed public key certificate from properties
To import a signed public key certificate, complete the following steps.
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
dialog box. (Refer to
2. Select an encryption engine from the Encryption Center Devices table, then select Engine >
Properties from the menu task bar, or right-click a switch or encryption engine and select
Properties.
NOTE
You can also select a an engine from the Encryption Center Devices table, then click the
Targets icon.
3. Click Import.
The Import Signed Certificate dialog box displays. (Refer to