IBM SAN , Brocade , SVC - Steps of Zoning

Please correct me if the following steps are not correct or someiathing more added to make zone more secure

-- . Single Initiator Multiple Target ( Preferred Zoning )

collect all WWPN of Host
Step 1/ create alias i.e alicreate aliasname, "WWPN"
Step 2 / zonecreate zonename , " aliasname;storageIO1;storageIO2"
Step 3 / cfgadd fabricname ;zonename
Step 4 / cfgenable fabricname
Step 5 / zone-validate

I have following question

1/ All the above steps are correct and in proper order
2/ Step 2 -- If it is SVC then here are port of SVC NODE but in case of non SVC please help
3/ Can We add more security by adding some DH-CHAP somewhere in above steps

Thanks