Security processor kek status, Encrypted lun states – Brocade Fabric OS Encryption Administrator’s Guide Supporting HP Secure Key Manager (SKM) and HP Enterprise Secure Key Manager (ESKM) Environments (Supporting Fabric OS v7.2.0) User Manual
Page 312
292
Fabric OS Encryption Administrator’s Guide (SKM/ESKM)
53-1002923-01
Security processor KEK status
A
Security processor KEK status
lists security processor KEK status information.
Encrypted LUN states
lists encrypted LUN states.
lists LUN states that are specific to tape LUNs.
TABLE 20
Security processor KEK status
KEK type
KEK status
1
1.
Only valid in the “encryption engine awaiting encryption group” state and the “encryption engine online” state.
Description
Primary KEK (current MK or
primary KV link key)
None
Primary KEK is not configured.
Mismatch
Primary KEK mismatch between the CP
and the SP.
Match/Valid
Primary KEK at CP matches the one in the
SP and is valid.
Secondary KEK (alternate
MK or secondary KV link key)
None
Secondary KEK is not configured.
Mismatch
Secondary KEK mismatch between the CP
and the SP.
Match/Valid
Secondary KEK at CP matches the one in
the SP and is valid.
Group KEK
None
Group KEK is not configured.
Mismatch
Group KEK mismatch between the CP and
the SP.
Match/Valid
Group KEK at the CP matches the one in
the SP and is valid.
TABLE 21
Encrypted LUN states
LUN state
String displayed
UNKNOWN
Unknown
LUN_STATE_UNAVAILABLE
LUN state unavailable.
LUN_STATE_INIT
Initialize
LUN_DISC_START
LUN discovery in progress.
LUN_DISC_COMPLETE
LUN discovery complete.
LUN_SETUP_START
LUN setup
LUN_CLEAR_TEXT
cleartext encryption enabled.
LUN_ENCRYPT
Encryption enabled.
LUN_READONLY_1
Read only (found native metadata while LUN is in DF mode).
LUN_READONLY_2
Read only (found DF metadata while LUN is in native mode).
LUN_READONLY_3
Read only (metadata key is in read-only state).
LUN_WR_META_IN_PROG
Write metadata is in progress.