Rebalancing an encryption engine, Security settings – Brocade Fabric OS Encryption Administrator’s Guide Supporting NetApp Lifetime Key Manager (LKM) and KeySecure Storage Secure Key Manager (SSKM) Environments (Supporting Fabric OS v7.2.0) User Manual
Page 98
80
Fabric OS Encryption Administrator’s Guide (LKM/SSKM)
53-1002925-01
Security settings
2
During rebalancing operations, be aware of the following:
•
You might notice a slight disruption in Disk I/O. In some cases, manual intervention may be
needed.
•
Backup jobs to tapes might need to be restarted after rebalancing is completed.
To determine if rebalancing is recommended for an encryption engine, check the encryption engine
properties. Beginning with Fabric OS 6.4, a field is added that indicates whether or not rebalancing
is recommended.
You might be prompted to rebalance during the following operations:
•
When adding a new disk or tape target container.
•
When removing an existing disk or tape target container.
•
After failover to a backup encryption engine in an HA cluster.
•
After a failed encryption engine in an HA cluster is recovered, and failback processing has
occurred.
Rebalancing an encryption engine
To rebalance an encryption engine, complete the following steps:
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
dialog box. (Refer to
2. Select an engine, then select Engine > Re-Balance from the menu task bar.
A warning message displays, noting the potential disruption of disk and tape I/O, and that the
operation may take several minutes.
3. Click Yes to begin rebalancing.
Security settings
Security settings help you identify if system cards are required to initialize an encryption engine
and also determine the number of authentication cards needed for a quorum.
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
dialog box. (Refer to
2. Select a group from the Encryption Center Devices table, then select Group > Security from the
menu task bar.
The Select Security Settings dialog box displays. The dialog box contains the following
information:
•
Quorum Cards: Select the number of authentication cards needed for a quorum. The
quorum is always set to one card less than the number of cards registered. For example, if
you register three cards, the quorum needed for authentication is two.
•
System Cards: Determine whether or not a system card is required to initialize the
encryption engine