Brocade Fabric OS Encryption Administrator’s Guide Supporting HP Secure Key Manager (SKM) and HP Enterprise Secure Key Manager (ESKM) Environments (Supporting Fabric OS v7.2.0) - Manual (Page 267)

Fabric OS Encryption Administrator’s Guide (SKM/ESKM) 247
53-1002923-01
Encryption group and HA cluster maintenance
6
Case 2: Replacing a “live” encryption engine in an HA cluster
1. Invoke the cryptocfg
--
replace
-
haclustermember command on the group leader to replace
the live encryption engine EE2 with another encryption engine (EE3). This operation effectively
removes EE2 from the HA cluster and adds the replacement encryption engine (EE3) to the HA
cluster. The target associations (T2) from the replaced encryption engine (EE2) are transferred
to the replacement encryption engine (EE3).
2. Commit the transaction.
3. Invoke the cryptocfg
--
reclaimWWN
-
EE command on the group leader followed by WWN of
the DCX Backbone chassis and the slot number of the failed encryption engine.
4. Invoke the cryptocfg
--
commit command to sync the configuration in the encryption group.
5. Remove the encryption engine EE2 from the encryption group
.
FIGURE 106 Replacing a “live” encryption engine in an HA cluster.
Deleting an HA cluster member
This command dissolves the HA cluster and removes failover capability from the participating
encryption engines.
1. Log in to the group leader as Admin or SecurityAdmin.
2. Invoke the cryptocfg
--
delete
-
hacluster command. Specify the name of the HA cluster you
want to delete.
SecurityAdmin:switch>cryptocfg --delete -hacluster HAC1
Delete HA cluster status: Operation succeeded.
3. Enter the cryptocfg
--
commit command to commit the transaction.