Brocade Fabric OS Encryption Administrator's Guide Supporting Fabric OS v6.2.0 (53-1001201-04, May 2009)

76 Encryption Administrator’s Guide

53-1001201-04

Master keys

Master key actions

Master key actions are as follows:

• Backup master key, which is enabled any time a master key exists when using an RKM or HP

SKM key vault.

• Restore master key, which is enabled when using an RKM or HP SKM key vault and either no

master key exists or the previous master key has been backed up.

• Create new master key, which is enabled when using an RKM or HP SKM key vault and either

no master key exists or the previous master key has been backed up.

Reasons master keys can be disabled

Master key actions are disabled if unavailable. There are several ways a master key can be

disabled:

• The user does not have Storage Encryption Security permissions. See “User privileges

overview” on page 16 for more information.

• The group leader is not discovered or managed by DCFM.

Saving the master key to a file

You can back up the master key to the key vault, to a file, or to a smart card set. Use the following

procedure to save the master key to a file.

1. Select Configure > Encryption from the menu bar.

The Configure Encryption dialog box displays.

2. Select an encryption group from the tree, and click Properties.

NOTE

Master keys belong to the group and are managed from the group properties.

3. Select the Security tab.

4. Select Backup Master Key as the Master Key Action.

The Master Key Backup dialog box displays, but only if the master key has already been

generated.