Brocade Fabric OS Encryption Administrator’s Guide Supporting HP Secure Key Manager (SKM) and HP Enterprise Secure Key Manager (ESKM) Environments (Supporting Fabric OS v7.2.0) - Manual (Page 248)

228 Fabric OS Encryption Administrator’s Guide (SKM/ESKM)
53-1002923-01
AIX Considerations
5
NOTE
When an EMC-CX3 storage array is used with HP-UX the CX3 array exposes both 0x0 and 0x4000
LUNs to the HP-UX host. 0x0 and 0x4000 LUNs have the same LSN. Both must be added as
cleartext.
AIX Considerations
For AIX-based PowerHA SystemMirror host clusters, the cluster repository disk should be defined
outside of the encryption environment.
Ensure that Dynamic Tracking is set to “Yes” for all Fibre Channel adapters on the AIX system.
Enabling a disabled LUN
When Metadata is found on the LUN, but current LUN state is indicated as cleartext or is being
converted from encrypt to cleartext, the LUN is disabled and the LUN status displayed by the LUN
Show CLI command is Internal EE LUN state: Encryption disabled .
The disabled LUN can be enabled by invoking the enable LUN command.
switch:admin> cryptocfg --enable -LUN
Disk metadata
If possible, 32 bytes of metadata are added to every block in LBA range 1 to 16 for both the native
Brocade format and DF-compatible formats. This metadata is not visible to the host. The Host I/Os
for the metadata region of the LUN are handled in the encryption switch software, and some
additional latency should be expected.
NOTE
For encrypted LUNs, data in LBA 0 will always be in cleartext.
Tape metadata
One kilobyte of metadata is added per tape block for both the native Brocade format and
DF-compatible formats. Tape block size (as configured by host) is modified by the encryption device
to accommodate 1K metadata per block. A given tape can have a mix of compressed and
uncompressed blocks. Block lengths are as follows.
Encrypted/Compressed
Tape Block Format Compressed and encrypted tape block data + 1K metadata + ASCII 0 pad = block
length of tape.
Encrypted Tape Block
Format (No Compression) Encrypted tape block data + 1K metadata = block length of tape.