Brocade Fabric OS Command Reference (Supporting Fabric OS v7.3.0) User Manual

Page 261

Fabric OS Command Reference

231

53-1003131-01

cryptoCfg

•

All nodes in the encryption group must run Fabric OS v6.4.0 or later when keyvault type is set to
DPM or LKM.

•

Device decommissioning does not work across a reboot. Rebooting terminates an ongoing
decommissioning process and the command must be reissued after completing the reboot.

•

Device decommissioning is supported with the DPM, TKLM, KMIP, ESKM, TEKA, and LKM key
vaults.

•

Decommissioning of tape devices or snap drive volumes is currently no supported.

•

Decommissioning does not automatically delete the keys. You must manually delete the keys from
the key vault to complete the operation.

OPERANDS

This command has the following operands:

--help -decommission

Displays the command usage help for the device decommissioning commands.

--decommission

Decommissions a disk LUN hosted in a specified container as seen from the
initiator. You must issue this command from the node that hosts the container.
Upon successful completion of a decommissioning operation, the LUN is deleted
from all the containers hosting it. All active paths to the LUN are lost; there is no
need to execute a decommissioning operation separately for each path
associated with the LUN. A commit operation is not required. The following
operands are required:

-container container_name

Specifies the name of the container that hosts the LUN.

-initiator initiatator_PWWN

Specifies the initiator port WWN.

-LUN LUN_num

Specifies the number of the LUN to be decommissioned.

--delete -decommissionedkeyids

Purges all key IDs associated with decommissioned LUNs from the internal
cache. You must delete the keys manually from the key vaults before purging the
cache.

--show -decommissionedkeyids

Displays the key IDs associated with decommissioned LUNs.

--show -vendorspecifickeyid key_ID

Displays vendor specific key_ID or UUID for a given key_ID.

EXAMPLES

The following steps must be performed to decommission a disk LUN:

Execute the decommission operation on a LUN

switch:admin> cryptocfg --decommission -container disk_ct0 \

-initiator 21:01:00:1b:32:29:5d:1c -LUN 0

Operation succeeded.