Launching the netapp datafort management console, Establishing the trusted link, Launching the netapp – Brocade Network Advisor SAN + IP User Manual v12.3.0 User Manual
Page 1073: Datafort management console
Brocade Network Advisor SAN + IP User Manual
1001
53-1003155-01
Steps for connecting to an LKM/SSKM appliance
25
•
Export and register encryption node certificates on LKM/SSKM. Refer to
registering the switch KAC certificates on LKM/SSKM”
•
If required, create an LKM/SSKM cluster for high availability. Refer to
•
Understanding Data Encryption Keys (DEKs). Refer to
Launching the NetApp DataFort Management Console
The NetApp DataFort Management Console (DMC) must be installed on your PC or workstation to
complete certain procedures described in this chapter. Refer to the appropriate DMC product
documentation for DMC installation instructions. After you install the DMC, complete the following
steps:
1. Launch the DMC.
2. Click the Appliance tab on the top panel.
3. Add the NetApp LKM/SSKM appliance IP address or hostname.
4. Right-click the added IP address and log in to the NetApp LKM/SSKM key vault.
Establishing the trusted link
You must generate the trusted link establishment package (TEP) on all nodes to obtain a trusted
acceptance package (TAP) before you can establish a trusted link between each node and the
NetApp LKM/SSKM appliance.
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
dialog box. (Refer to
Figure 376
on page 976.)
2. Select an LKM/SSKM group from the Encryption Center Devices table, then select Group >
Link Keys from the menu task bar.
The switch name displays in the link status table under Switch, with a Link Key Status of
Link Key requested, waiting for LKM approval.
3. Select the switch, then click Establish.
This sends a Trust Establishment Package (TEP) message to the LKM/SSKM, which is needed
to establish the trusted link between the switch and the LKM/SSKM appliance.
4. Launch the NetApp DataFort Management Console (DMC) and click the View Unapproved
Trustees tab.
The switch is listed as openkey_trustee_
IP address.
5. Select the switch, then click Approve and Create TAP.
The Approve TEP dialog box displays. The TEP must be approved before a TAP can be created.
6. Provide a label in the dialog box, then click Approve to approve the TEP.
A list of recovery cards and recovery officers is displayed. TEP approval is done by a quorum of
recovery officers, using assigned recovery cards. Each recovery officer must individually insert
one of the listed recovery cards into a card reader attached to the PC or workstation, then
enter the password for that card and click Start. The procedure is repeated until a quorum of
recovery officers has approved the TEP.