You can add a new path to an existing disk LUN or add a new LUN and path by launching the Add New Path wizard. To launch the wizard, complete the following steps.
NOTE
Before you can add a target disk LUN for encryption, you must first configure the storage arrays. For more information, refer to Configuring storage arrays on page 79.
1. Select Configure > Encryption from the menu task bar to display the Encryption Center dialog box.
2. Select a group, switch, or engine from the Encryption Center Devices table, then select Group/
Switch/Engine > Disk LUNs from the menu task bar.
The Encryption Disk LUN View dialog box displays.
FIGURE 51 Encryption Disk LUN View dialog box
The Encryption Disk LUN View dialog box provides a convenient way to view and manage disk LUNs that are provisioned from different hosts, to identify conflicts between configuration policies on storage systems, and to provide a launching point for the Add New Path wizard for configuring multiple I/O paths to the LUN.
The Storage Array selector determines which LUN paths are displayed in the table. You can select a storage array from the LUN view prior to launching the Add New Path wizard. Only ports that belong to at least one target container are listed.
Use the Host selector to select a host from the LUN view prior to launching the Add New Path wizard. Only ports that belong to at least one target container are listed.
3. Click Add to launch the Add New Path wizard.
The Select Target Port dialog box displays.
Adding target disk LUNs for encryption
FIGURE 52 Select Target Port dialog box
The Select Target Port dialog box is used to select a target port when configuring multiple I/O paths to a disk LUN.
4. Select the target port from the Target Port table, then click Next.
The Select Initiator Port dialog box displays.
FIGURE 53 Select Initiator Port dialog box
The Select Initiator Port dialog box is used to select an initiator port when configuring multiple I/O paths to a disk LUN.
5. Select the initiator port from the Initiator Port table, then click Next.
LUN discovery is launched and a progress bar displays. There are four possible outcomes:
• A message displays indicating no LUNs were discovered. Click OK to dismiss the message and exit the wizard.
• A message displays indicating LUNs have been discovered, but are already configured. Click OK to dismiss the message and exit the wizard.
Configuring Encryption Using the Management Application
• A message displays indicating that the target is not in the right state for discovering LUNs. Click OK to dismiss the message and exit the wizard.
• The Select LUN dialog box displays, which lists discovered LUNs that are available.
FIGURE 54 Select LUN dialog box
The Select LUN dialog box is used to select a LUN when configuring multiple I/O paths to a disk LUN. Note the following:
• The values for Current LUN State are Encrypted, which is automatically selected if the LUN has a key ID; Clear Text, and <select> for LUNs without a key ID. User selection is required.
• Thin provision support is limited to Brocade-tested storage arrays. The thin provisioned LUN status will be displayed as Yes for supported storage arrays only.
• A value for New LUN is displayed only if remote replication is enabled.
6. Select the LUN from LUN list.
7. Set the Current LUN State as required.
If the LUN already has an existing key ID, the Current LUN State field is automatically set to Encrypted. You can accept the automatically assigned state or change this value.
8. Click Finish.
The new LUN path is added to the Encryption Disk LUN View table.
9. Click OK on the LUN view to commit the operation.
NOTE
The maximum number of uncommitted configuration changes per disk LUN (or maximum paths to a LUN) is 512 transactions. The 512 LUN operations can be for the same LUN or be subjected to 25 distinct LUNs. Adding or modifying more than 25 paths on the same LUN is not recommended unless the LUN is encrypted.
In environments where there are multiple paths to the same LUNs, it is critical that the same LUN policies are configured on all instances of the LUN. Be sure to return to the Encryption Disk LUN View dialog box to determine if there are configuration mismatches. Check under Encryption Mode for any entries showing Mismatch. To correct the mismatch, click the incorrect mode to display the options, then select the correct mode.
Configuring Encryption Using the Management Application
FIGURE 55 Correcting an encryption mode mismatch
When you correct a policy on a LUN, it is automatically selected for all paths to the selected LUN.
When you modify LUN policies, a Modify icon displays to identify the modified LUN entry.
NOTE
Protocol end point LUNs can be presented by 3PAR for VMware hosts. These LUNs have no Virtual Volume space. Adding these LUNs in the Brocade Encryption Switch results in the LUNs being set to the Not Ready state.
10.Click OK or Apply to apply the changes.