Configure macsec keychain policy using the GUI

On the menu bar, click Fabric > Fabric Policies > Policies > MACsec > KeyChains. In the Navigation pane, right click on KeyChains to open Create MACsec Keychain Policy and perform the following actions:

1. In the Name field, enter a name for the MACsec Fabric Interface policy.
2. Expand the MACsec Key Policy table to create the Key policy.

In the MACsec Key Policy dialog box perform the following actions:

1. In the Name field, enter a name for the MACsec Key policy.
2. In the Key Name field, enter a key name (up to 64 hexadecimal characters).

   Note

   A maximum of 64 keys are supported per keychain.

3. In the Pre-shared Key field, enter the pre-shared key information.

   Note

   • For 128-bit cipher suites only 32 character PSKs are permitted.

   • For 256-bit cipher suites only 64 Character PSKs are permitted.

4. In the Start Time field, select a date for the key to become valid.
5. In the End Time field, select a date for the key to expire. Click Ok and Submit.

   Note

   When defining multiple keys in a keychain, the keys must be defined with overlapping times in order to assure a smooth transition from the old key to the new key. The endTime of the old key should overlap with the startTime of the new key.