beautypg.com

Dell POWEREDGE M1000E User Manual

Page 215

background image

Fabric OS Command Reference

183

53-1001764-02

cryptoCfg

2

Notify SPM of Node Cfg

Operation succeeded.

To initialize an encryption engine:

SecurityAdmin:switch>

cryptocfg --initEE

This will overwrite previously generated identification

and authentication data

ARE YOU SURE (yes, y, no, n): y

Operation succeeded.

To register an encryption engine with the CP or chassis:

SecurityAdmin:switch>

cryptocfg -regEE

Operation succeeded.

To enable an encryption engine:

SecurityAdmin:switch>

cryptocfg --enableEE

Operation succeeded.

To disable an encryption engine:

SecurityAdmin:switch> c

ryptocfg --disableEE

Operation succeeded.

To export a KAC certificate from the group leader to an external host:

SecurityAdmin:switch>

cryptocfg --export -scp -KACcert 192.168.38.245 mylogin kac_lkm_cert.pem

Password:

Operation succeeded.

To export a KAC certificate from the group leader to an attached USB device:

SecurityAdmin:switch>

cryptocfg --export -usb -KACcert kac_lkm_cert.pem

Password:

Operation succeeded.

To import a member CP certificate to the group leader:

SecurityAdmin:switch>

cryptocfg --import -scp enc1_cpcert.pem 192.168.38.245 mylogin

/temp/certs/enc_switch1_cpcert.pem
Password:

To register a member node with the group leader:

SecurityAdmin:switch>

cryptocfg --reg -membernode 10:00:00:05:1e:39:14:00 enc_switch1_cert.pem

10.32.244.60
Operation succeeded.

To deregister a member node:

SecurityAdmin:switch>

cryptocfg --dereg -membernode 10:00:00:05:1e:53:b6:80

Operation succeeded.

To generate a trusted link establishment package (TEP):

SecurityAdmin:switch>

cryptocfg --dhchallenge 10.33.54.231

Operation succeeded.

To issue the DH response to retrieve the TAP from the NetApp LKM appliance:

SecurityAdmin:switch>

cryptocfg --dhresponse 10.33.54.231