Data Encryption - Oracle ZFS Storage Appliance Administration Manual

Data Encryption

LICENSE NOTICE: Encryption may be evaluated free of charge, but the feature requires
that an independent license be purchased separately for use in production. Encryption is only
available to license on the Oracle ZFS Storage ZS5-4, Oracle ZFS Storage ZS5-2, Oracle ZFS
Storage ZS4-4, and Oracle ZFS Storage ZS3-4. After the evaluation period, this feature must
either be licensed or deactivated. Oracle reserves the right to audit for licensing compliance at
any time. For details, refer to the "Oracle Software License Agreement ("SLA") and Entitlement
for Hardware Systems with Integrated Software Options."
The Oracle ZFS Storage Appliance offers transparent data encryption for individual shares
(filesystems and LUNs), and shares created inside of projects.
To configure and manage encryption, use these tasks:
"Data Encryption Workflow" on page 560
■
Configuring LOCAL Keystore Encryption - BUI,
■
Configuring OKM Keystore Encryption - BUI,
■
Creating an Encrypted Project - BUI,
■
Changing a Project Encryption Key - BUI,
■
Creating an Encrypted Filesystem or LUN - BUI,
■
Changing a Share Encryption Key - BUI,
■
Backing up a LOCAL Key - BUI,
■
Deleting an Encryption Key - BUI,
■
Restoring a LOCAL Key - BUI,
■
Cloning a Snapshot - BUI,
■
To understand data encryption, use these topics:
"Encryption Properties" on page 581
■
"Managing Encryption Keys" on page 582
■
"Performance Impact of Encryption" on page 584
■
"Encryption Key Life Cycle" on page 585
■
"Backing up and Restoring Encrypted Data" on page 585
■
"Replicating an Encrypted Share" on page 586
■
CLI
CLI
CLI
CLI
CLI
CLI
CLI
CLI
CLI
CLI
Data Encryption 559