Data Encryption - Fujitsu ETERNUS DX S5 Series Design Manual

4. NAS Functions

Data Encryption

Note
During the operation phase
• If "Out of NAS Capacity" for the Setup Event Notification function is enabled, an event is notified
when all areas including the root reserved area are used.
• The usage status of a NAS volume can be checked via ETERNUS Web GUI or ETERNUS CLI. The used
capacity that is displayed includes the capacity of the access client reserved area regardless of the
protocol (CIFS, NFS, and CIFS/NFS) that is used for the shared folder. The used capacity and the free
capacity do not include the capacity of the root reserved area. The capacity of the root reserved area
is included in the total capacity.
Data Encryption
By using Self Encrypting Drives (SED) or the firmware data encryption function, NAS volume data can be
encrypted.
Because data encryption is performed using the firmware in the ETERNUS DX controller, the performance is
degraded when compared to unencrypted data access.
Because SEDs do not affect system performance, encrypting the data with SEDs is recommended when system
performance is prioritized.
For details on data encryption, refer to
Caution
During the design phase
For each ETERNUS DX, select and specify "AES128", "AES256", or "Fujitsu Original Encryption" as the
encryption mode for the firmware data encryption function. To specify the encryption mode, refer to the
following notes.
• For the ETERNUS DX100 S5
Set the encryption mode to "Fujitsu Original Encryption". AES encryption modes cannot be used because
setting "AES128" or "AES256" deteriorates the performance of the NAS function.
• For the ETERNUS DX200 S5 and the ETERNUS DX500 S5/DX600 S5
It is highly recommended that the encryption mode is set to "Fujitsu Original Encryption".
"Data Encryption" (page 82).
171 Design Guide