beautypg.com

Engine operations tab, Figure 85 – Brocade Fabric OS Encryption Administrator’s Guide Supporting HP Secure Key Manager (SKM) and HP Enterprise Secure Key Manager (ESKM) Environments (Supporting Fabric OS v7.2.0) User Manual

Page 145

background image

Fabric OS Encryption Administrator’s Guide (SKM/ESKM)

125

53-1002923-01

Viewing and editing encryption group properties

2

FIGURE 85

Add Tape Pool by number dialog box

4. Based on your selection, do one of the following:

If you selected Name as the Tape Pool Label Type, enter a name for the tape pool. This
name must match the tape pool label or tape ID that is configured on the tape
backup/restore application.

If you selected Number as the Tape Pool Label Type, enter a (hex) number for the tape
pool. This number must match the tape pool label or tape number that is configured on
the tape backup/restore application.

5. Select the Encryption Mode. Options are Clear Text, and Native Encryption. Note the following:

The Key Lifespan (days) field is editable only if the tape pool is encrypted.

If Clear Text is selected as the encryption mode, the key lifespan is disabled.

NOTE

You cannot change the encryption mode after the tape pool I/O begins.

6. Enter the number of days to use a key before obtaining a new one, if you choose to enforce a

key lifespan. The default is Infinite (a blank field or a value of 0), which is the recommended
setting.

NOTE

The key lifespan interval represents the key expiry timeout period for tapes or tape pools. You
can only enter the Key Lifespan field if the tape pool is encrypted. If Clear Text is selected as
the encryption mode, the Key Lifespan field is disabled.

7. Click OK.

Engine Operations tab

The Engine Operations tab enables you to replace an encryption engine in a switch with another
encryption engine in another switch within a DEK Cluster environment. A DEK Cluster is a set of
encryption engines that encrypt the same target storage device. DEK Clusters do not display in
Brocade Network Advisor; they are an internal implementation feature and have no
user-configurable properties. Refer to

“Replacing an encryption engine in an encryption group”

on

page 56.

The Engine Operations tab is viewed from the Encryption Group Properties dialog box. (Refer to

Figure 82

.) To access the Engine Operations tab, select a group from the Encryption Center Devices

table, then select Group > Engine Operations from the menu task bar. The Properties dialog box
displays with the Engine Operations tab selected.