beautypg.com

Security processor kek status, Encrypted lun states – Brocade Fabric OS Encryption Administrator’s Guide Supporting HP Secure Key Manager (SKM) and HP Enterprise Secure Key Manager (ESKM) Environments (Supporting Fabric OS v7.2.0) User Manual

Page 312

background image

292

Fabric OS Encryption Administrator’s Guide (SKM/ESKM)

53-1002923-01

Security processor KEK status

A

Security processor KEK status

Table 20

lists security processor KEK status information.

Encrypted LUN states

Table 21

lists encrypted LUN states.

Table 22

lists LUN states that are specific to tape LUNs.

TABLE 20

Security processor KEK status

KEK type

KEK status

1

1.

Only valid in the “encryption engine awaiting encryption group” state and the “encryption engine online” state.

Description

Primary KEK (current MK or
primary KV link key)

None

Primary KEK is not configured.

Mismatch

Primary KEK mismatch between the CP
and the SP.

Match/Valid

Primary KEK at CP matches the one in the
SP and is valid.

Secondary KEK (alternate
MK or secondary KV link key)

None

Secondary KEK is not configured.

Mismatch

Secondary KEK mismatch between the CP
and the SP.

Match/Valid

Secondary KEK at CP matches the one in
the SP and is valid.

Group KEK

None

Group KEK is not configured.

Mismatch

Group KEK mismatch between the CP and
the SP.

Match/Valid

Group KEK at the CP matches the one in
the SP and is valid.

TABLE 21

Encrypted LUN states

LUN state

String displayed

UNKNOWN

Unknown

LUN_STATE_UNAVAILABLE

LUN state unavailable.

LUN_STATE_INIT

Initialize

LUN_DISC_START

LUN discovery in progress.

LUN_DISC_COMPLETE

LUN discovery complete.

LUN_SETUP_START

LUN setup

LUN_CLEAR_TEXT

cleartext encryption enabled.

LUN_ENCRYPT

Encryption enabled.

LUN_READONLY_1

Read only (found native metadata while LUN is in DF mode).

LUN_READONLY_2

Read only (found DF metadata while LUN is in native mode).

LUN_READONLY_3

Read only (metadata key is in read-only state).

LUN_WR_META_IN_PROG

Write metadata is in progress.