beautypg.com

Dell POWEREDGE M1000E User Manual

Page 218

background image

186

Fabric OS Command Reference

53-1001764-02

cryptoCfg

2

Master key generated. The master key should be

exported before further operations are performed.

To export the master key to the RKM key vault:

SecurityAdmin:switch>

cryptocfg --exportmasterkey

Enter the passphrase:

passphrase

Master key exported.

Key ID: 8f:88:45:32:8e:bf:eb:44:c4:bc:aa:2a:c1:69:94:2

To export the master key to a file:

SecurityAdmin:switch>

cryptocfg --exportmasterkey -file

Enter the passphrase:

passphrase

Master key file generated.

To export the master key file to an external host:

SecurityAdmin:switch>

cryptocfg --export -scp -currentMK 192.168.38.245 mylogin GL_MK.mk

Password:

Operation succeeded.

To recover the master key from the key vault to the current location:

SecurityAdmin:switch>

cryptocfg --recovermasterkey currentMK -keyID

bd:ae:2d:0b:b9:1a:ad:18:0d:eb:fe:c9:67:ed:29:b0
Enter the passphrase:

passphrase

Recover master key status: Operation succeeded.

To display the encryption group configuration:

SecurityAdmin:switch>c

ryptocfg --show -groupcfg

Encryption Group Name: system_test

Failback mode: Auto

Replication mode: Disabled

Heartbeat misses: 3

Heartbeat timeout: 2

Key Vault Type: LKM

System Card: Disabled

Primary Key Vault:

IP address: 10.32.49.200

Certificate ID: 3D2-LKM3-B05-200

Certificate label: LKM200

State: Connected

Type: LKM

Secondary Key Vault:

IP address: 10.32.49.201

Certificate ID: 3D2-LKM4-B05-201

Certificate label: LKM201

State: Connected

Type: LKM

Additional Primary Key Vault Information::

Key Vault/CA Certificate Validity: Yes

Port for Key Vault Connection: 32579

Time of Day on Key Server: N/A

Server SDK Version: N/A