Quantum DXi6900 User Manual page 341

Chapter 9: Configuration
System
Figure 218: Security Notice Page
To add or update a security notice message, enter the message in the box and click Apply.
Data-at-Rest Encryption
The Data-at-Rest page allows you to enable Data-at-Rest Encryption on the DXi6900 and manage security
keys.
DXi6900
Data-at-Rest Encryption uses Self Encrypting Drive (SED) technology to secure all data stored on the
DXi6900. This includes file data and metadata, configuration files, and the DXi software and operating
system. To enable Data-at-Rest Encryption, you must supply a passphrase. The passphrase ensures that
all physical disks are paired with their respective controllers, and that data can only be read back from the
disk by the same controller that wrote it. If a controller must be replaced, the passphrase is needed to enable
the new controller to access the data on the physical disks.
To enable Data-at-Rest Encryption, the feature must be licensed, and all of the drive controllers and hard
drives (active and hot spares) in the DXi must support Self Encrypting Drive (SED) technology (not available
in all regions). A DXi6900 configuration with all 4TB SED hard drives in the Array (RBOD)/Expansion
(EBOD) modules and 1.2 TB SED hard drives in the Node meets the requirements for Data-at-Rest
Encryption.
DXi6900-S
Data-at-Rest Encryption uses Self Encrypting Drive (SED) technology to secure all customer data stored on
the DXi6900-S Arrays. To enable Data-at-Rest Encryption, you must supply a passphrase. The passphrase
ensures that all physical disks are paired with their respective Array controllers, and that data can only be
read back from the disk by the same controller that wrote it. If a controller must be replaced, the passphrase
is needed to enable the new controller to access the data on the physical disks.
To enable Data-at-Rest Encryption, the feature must be licensed, and all of the drive controllers and hard
drives (active and hot spares) in the DXi must support Self Encrypting Drive (SED) technology (not available
in all regions). A DXi6900-S configuration with all 8 TB SED hard drives in the Array (RBOD)/Expansion
(EBOD) modules meets the requirements for Data-at-Rest Encryption.
Quantum DXi6900 User's Guide 341