Chapter 3: Safestore Disk Encryption; Terminology - Lenovo ThinkServer RD650 User Manual

12Gb/s MegaRAID SAS Software User Guide
March 2014

Chapter 3: SafeStore Disk Encryption

This chapter describes the LSI SafeStore Disk Encryption service. The SafeStore Disk Encryption service is a collection
of features within LSI storage products that supports self-encrypting disks. SafeStore encryption services supports
local key management.
Overview
The SafeStore Disk Encryption service offers the ability to encrypt data on drives and use disk-based key management
to provide data security. This solution provides data protection in the event of theft or loss of physical drives. With
self-encrypting drives, if you remove a drive from its storage system or the server in which it is housed, the data on
that drive is encrypted and useless to anyone who attempts to access without the appropriate security authorization.
With the SafeStore encryption service, data is encrypted by the drives. You can designate which data to encrypt at the
individual virtual disk (VD) level.
Any encryption solution requires management of the encryption keys. The security service provides a way to manage
these keys. Both the WebBIOS Configuration Utility and the MegaRAID Storage Manager software offer procedures
that you can use to manage the security settings for the drives.
Purpose and Benefits
Security is a growing market concern and requirement. MegaRAID customers are looking for a comprehensive storage
encryption solution to protect data. You can use the SafeStore encryption service to help protect your data.
In addition, SafeStore local key management removes the administrator from most of the daily tasks of securing data,
thereby reducing user error and decreasing the risk of data loss. Also, SafeStore local key management supports
instant secure erase of drives that permanently removes data when repurposing or decommissioning drives. These
services provide a much more secure level of data erasure than other common erasure methods, such as overwriting
or degaussing.
3.1

Terminology

The following table describes the terminology related to the SafeStore encryption feature.
LSI Corporation
- 41 -
Chapter 3: SafeStore Disk Encryption
Terminology