Redirection zones, Disk device decommissioning, Figure 63 – Brocade Fabric OS Encryption Administrator’s Guide Supporting NetApp Lifetime Key Manager (LKM) and KeySecure Storage Secure Key Manager (SSKM) Environments (Supporting Fabric OS v7.2.0) User Manual
Page 101

Fabric OS Encryption Administrator’s Guide (LKM/SSKM)
83
53-1002925-01
Redirection zones
2
FIGURE 63
Encryption Targets dialog box
Redirection zones
It is recommended that you configure the host and target in the same zone before you configure
them for encryption. Doing so creates a redirection zone to redirect the host/target traffic through
the encryption engine; however, a redirection zone can only be created if the host and target are in
the same zone. If the host and target are not already configured in the same zone, you can
configure them for encryption, but you will still need to configure them in the same zone, which will
then enable you to create the redirection zone as a separate step.
NOTE
If the encryption group is busy when you click Commit, you are given the option to either force the
commit, or abort the changes. Click Commit to re-create the redirection zone.
Disk device decommissioning
A disk device needs to be decommissioned when any of the following occurs:
•
The storage lease expires for an array, and devices must be returned or exchanged.
•
Storage is reprovisioned for movement between departments.
•
An array or device is removed from service.
In all cases, all data on the disk media must be rendered inaccessible. Device decommissioning
deletes all information that could be used to recover the data, for example, information related to
master key IDs and cache files.
After device decommissioning is performed, the following actions occur:
•
Metadata on the LUN is erased and the reference is removed from cache on the Brocade
Encryption Switch.
•
The LUN state is shown as decommissioned in the key vault.
•
The LUN is removed from the container.