Secure Shred - Quantum DXi6900 User Manual

Chapter 10: Utilities

Secure Shred

a. Enter the system serial number in the Serial Number box and click Submit.
b. Enter the authorization code (printed on the License Certificate) and click Get License Key.
c. Enter the Feature ID for each storage array.
If entering more than one Feature ID, make sure to enter the correct Feature ID for Storage Array
1 (Qarray1) and Storage Array 2 (Qarray2) Storage Array 1 (Qarray1), Storage Array 2 (Qarray2),
and Storage Array 3 (Qarray3).
d. Click Get License Key.
The License Key Details section displays the Data-at-Rest Encryption license key. Print out or
write down the license key, or save it to a text file.
e. For each Storage Array, click Generate PFK File to generate a Premium Feature Key file, and
then click Save to save the PFK file to your computer.
Note: Make sure to keep a copy of the PFK files for backup purposes.
3. In the DXi remote management console, on the Utilities > License Keys page, enter the Data-at-
Rest Encryption license key in the New Key box, and then click Add.
The Data-at-Rest Encryption license key is added to the system.
4. In the DXi remote management console, navigate to the Configuration > System > Security >
Data-at-Rest page and perform the following steps:
a. Upload the correct PFK file to each Storage Array (see
b. Enable Data-at-RestEncryption for all hard drives in the DXi6900 (see
page 341).
c. Make a backup copy of your encryption keys (see

Secure Shred

The Secure Shred page allows you to securely and permanently erase sensitive data stored on the
DXi6900. To securely erase data, first delete files on NAS shares or storage servers, or erase tape
cartridges on VTL partitions, then start secure shred. During secure shred, all residual data associated with
the deleted files or cartridges is securely erased from the disk drives by performing a single-pass overwrite
with zeros.
While secure shred is running, the DXi6900 operates in limited mode. This means you cannot perform
backups or restores, all scheduled jobs (including replication jobs) are stopped, and you cannot access or
use any other features of the DXi. If necessary, you can cancel secure shred at any time and return the DXi
to normal operation.
Caution: The secure shred process can take multiple days to complete.
To access the Secure Shred page, click the Utilities menu, and then click the Secure Shred tab (see
Figure 239 on the next
Quantum DXi6900 User's Guide
page).
Uploading a PFK File on page
Data-at-Rest Encryption on
Managing Recovery Files on page
345)
344).
371