Brocade Fabric OS Encryption Administrator’s Guide Supporting HP Secure Key Manager (SKM) and HP Enterprise Secure Key Manager (ESKM) Environments (Supporting Fabric OS v7.2.0) - Manual (Page 302)

282 Fabric OS Encryption Administrator’s Guide (SKM/ESKM)
53-1002923-01
Brocade Encryption Switch removal and replacement
6
31. If HA cluster membership for the old Brocade Encryption Switch was not in place, move
container movement to the new Brocade Encryption Switch using the following procedure.
a. Replace the old EE with the new EE using following command on the group leader.
Admin:switch> cryptocfg –replace
b. Issue commit.
Admin:switch> cryptocfg --commit
32. Check the EG state using the following command to ensure that the entire EG is in the
converged and In Sync state.
Admin:switch> cryptocfg –-show –groupcfg
Single-node EG Replacement
1. Upload the configuration stored on the Brocade Encryption Switch you are replacing using the
FOS configupload command.
2. Power off the Brocade Encryption Switch. Remove the Mgmt Link, I/O links, and FC cables from
the Brocade Encryption Switch, noting where each was attached so that the replacement
Brocade Encryption Switch can be cabled properly.
3. Power on the new Brocade Encryption Switch. Note that the FC cables have not yet been
plugged in.
4. Set the IP address for the new Brocade Encryption Switch using the ipAddrSet command for
both Mgmt and I/O links. Check that the switch name and domain ID associated with the
replacement switch match that of the original.
5. Initialize the new Brocade Encryption Switch node using following command:
Admin:switch> cryptocfg --initnode
6. Zeroize the new Brocade Encryption Switch.
Admin:switch> cryptocfg --zeroizeEE
7. If system card authentication was enabled, you must re-register the system card through the
BNA client for the new encryption engine.
8. Initialize the new encryption engine using the following command.
Admin:switch> cryptocfg --initEE [slotnumber]
9. Register the new encryption engine using the following command.
Admin:switch> cryptocfg --regEE [slotnumber]
10. Enable the new encryption engine using the following command.
Admin:switch> cryptocfg --enableEE [slotnumber]
11. Invoke the following command to cleanup any WWN entries which are used earlier.
Admin:switch> cryptocfg --reclaim -cleanup