Brocade Fabric OS Encryption Administrator’s Guide Supporting HP Secure Key Manager (SKM) and HP Enterprise Secure Key Manager (ESKM) Environments (Supporting Fabric OS v7.2.0) - Manual (Page 95)

Fabric OS Encryption Administrator’s Guide (SKM/ESKM) 75
53-1002923-01
Adding target disk LUNs for encryption
2
NOTE
The maximum number of uncommitted configuration changes per disk LUN (or maximum
paths to a LUN) is 512 transactions. The 512 LUN operations can be for the same LUN or be
subjected to 25 distinct LUNs. This change of restriction in commit limit is applicable when
using Brocade Network Advisor only. Earlier Fabric OS versions allowed a maximum of 25
uncommitted changes per disk LUN. Adding or modifying more than 25 paths on the same LUN
is not recommended unless the LUN is encrypted.
In environments where there are multiple paths to the same LUNs, it is critical that the same
LUN policies are configured on all instances of the LUN. Be sure to return to the Encryption
Disk LUN View dialog box to determine if there are configuration mismatches. Check under
Encryption Mode for any entries showing Mismatch. To correct the mismatch, click the
incorrect mode to display the options, then select the correct mode. (Refer to
Figure 49 .)
FIGURE 49 Correcting an encryption mode mismatch
When you correct a policy on a LUN, it is automatically selected for all paths to the selected
LUN. When you modify LUN policies, a Modify icon displays to identify the modified LUN entry.
10. Click OK or Apply to apply the changes.
Configuring storage arrays
The storage array contains a list of storage ports that will be used later in the LUN centric view. You
must assign storage ports from the same storage array for multi-path I/O purposes. On the LUN
centric view, storage ports in the same storage array are used to get the associated CryptoTarget
containers and initiators from the database. Storage ports that are not assigned to any storage
array but are within the fabrics of the encryption group, will be listed as a single target port on the
LUN centric view. Storage Arrays are configured using the Storage Port Mapping dialog box. You will
need to:
1. Configure target and zone initiator ports in the same zone in order for the target container to
come online and discover LUNs in the storage system.
2. Create CryptoTarget containers for each target port in the storage array from the Target
Container dialog box. Add initiator ports to the container. You must create target containers for
those target ports in the configured storage arrays or unassigned target ports before mapping
any LUN on the LUN centric view. If you do not create the container, LUN discovery will not
function.