Cisco MDS 9000 Series Configuration Manual page 290

Best Practices for Changing Keys
switch# configure terminal
switch(config)# fcsp esp sa 257
switch(config-sa)# key 0xAC9EF8BC8DB2DBD2008D184F794E0C38
switch(config-sa)# salt 0x1234
Step 2 Configure the ingress SA on Switch1.
switch# configure terminal
switch(config)# interface fc1/1
switch(config-if)# fcsp esp manual
switch(config-if)# ingress-sa 257
Step 3 Configure the ingress and the egress SA on Switch2.
switch# configure terminal
switch(config)# interface fc1/1
switch(config-if)# fcsp esp manual
switch(config-if)# ingress-sa 257
switch(config-if)# egress-sa 257
Step 4
Configure the egress SA on Switch1.
switch# configure terminal
switch(config)# interface fc1/1
switch(config-if)# fcsp esp manual
switch(config-if)# egress-sa 257
Step 5
Remove the previously configured ingress SA from both the switches.
switch# configure terminal
switch(config)# interface fc1/1
switch(config-if)# fcsp esp manual
switch(config-if)# no ingress-sa 256
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
272
Configuring Cisco TrustSec Fibre Channel Link Encryption