Tape volume groups can be rekeyed periodically to ensure better security and also when the key security has been compromised.
In the unique key mode, the rekey operation generates a new tape volume group wrap key. The current tape volume group wrap key is archived. The current media keys remain unchanged, and the new media keys are wrapped with the new tape volume group wrap key.
In the shared key mode, the rekey operation generates a new tape volume group wrap key and a new tape volume group shared key. The current tape volume group wrap key is archived while the current tape volume group shared key remain unchanged (in active state).
The volume groups can be rekeyed monthly even if you do not use the unique key mode.
To rekey tape volume groups, follow these steps:
1. In the DCNM-SAN Web Client navigation pane, select Volume Groups to display the volume groups in the cluster.
2. Select one or more volume groups.
3. Click Rekey. A confirmation dialog box is displayed asking if the rekey operation is to be performed. Click OK to rekey the selected volume groups.