Secure Fibre Channel Protocols: FC-SP and FCAP

It is clear that Fibre Channel SAN security suffers from a lack of secure protocols. Initiatives from the ANSI T11 Committee, which sets standards for Fibre Channel, aim to correct this deficit. Several protocols are under consideration, but two plug important holes immediately.

The first is FC-SP, short for Fibre Channel Security Protocol. It provides for an encrypted transmission between two Fibre Channel nodes. Similar to IPSec, it protects data in transit. This is especially important in situations in which the Fibre Channel connection can be tapped, such as long-distance FC connections.

The second is FCAP, or Fibre Channel Authentication Protocol. Using techniques similar to authentication on IP networks, FCAP allows nodes to be authenticated. It contains provisions for the use of keys and certificates.

Both of these protocols point to an awareness of the need to add security protocols to storage networks.