Brocade Fabric OS Encryption Administrator’s Guide Supporting NetApp Lifetime Key Manager (LKM) and KeySecure Storage Secure Key Manager (SSKM) Environments (Supporting Fabric OS v7.2.0) - Manual (Page 118)

100 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)
53-1002925-01
Viewing and editing encryption group properties
2
When the first encryption engine comes back online, the encryption group’s failback
setting determines whether the first encryption engine automatically resumes encrypting
and decrypting traffic to its encryption targets. In manual mode, the second encryption
engine continues handling the traffic until you manually invoke failback using the CLI, or
until the second encryption engine fails.
- Key Vault Type: NetApp Lifetime Key Manager (LKM) The NetApp Key Vault Type name is
shown as NetApp Lifetime Key Manager (LKM) for both NetApp Lifetime Key Manager
(LKM) and SafeNet KeySecure for key management (SSKM) Key Vault Types.)
• REPL Support: (DPM key vault only.) Shown as Not Applicable.
• Primary Key Vault IP Address: The IP address of the primary key vault, either IPv4 or host
name.
• Primary Key Vault Connection Status: The status of the primary key vault link. In an operating
environment, the status should be Connected. Other options are:
- Unknown/Busy
- Not configured
- Not responding
- Failed authentication
• Backup Key Vault IP Address: Optional. The IP address of the backup key vault. This field can
be left blank.
• Backup Key Vault Connection Status: The status of the backup key vault link. Options are:
- Connected
- Unknown/Busy
- Not configured
- Not responding
- Failed authentication
• High Availability Mode: (KMIP key vault only.) Shown as Not Applicable.
• User Authentication: (KMIP key vault only.) Shown as Not Applicable.
• Certificate Type: (KMIP key vault only.) Shown as Not Applicable.
• Vendor Name: (KMIP key vault only.) Shown as Not Applicable.
• Primary Key Vault Certificate table: Displays the details of the primary vault certificate; for
example, version and signature information. The Load from File button allows you to locate and
load a primary key vault certificate from a different location.
• Backup Key Vault Certificate table: Displays the details of the backup vault certificate; for
example, version and signature information. The Load from File button allows you to locate and
load a backup key vault certificate from a different location.
Members tab
The Members tab lists group switches, their role, and their connection status with the group leader.
The table columns are not editable.
The Members tab is viewed from the Encryption Group Properties dialog box. (Refer to Figure 76 .)
To access the Members tab, select a group from the Encryption Center Devices table, then select
Group > Properties from the menu task bar.