Table of Contents
Advertisement
Data Encryption Workflow
Data Encryption Workflow
The following steps show the general procedure for configuring and using data encryption. For
information about encryption properties, see
Configure LOCAL keystore or Oracle Key Manager (OKM) keystore encryption.
1.
For information about creating LOCAL or OKM keystores, see the following topics:
"Configuring LOCAL Keystore Encryption (BUI)" on page 560
■
LOCAL Keystore Encryption (CLI)" on page 563
"Configuring OKM Keystore Encryption (BUI)" on page 564
■
Keystore Encryption (CLI)" on page 565
2.
Create LOCAL or OKM encryption keys.
For information about creating LOCAL or OKM keys, see the following topics:
"Configuring LOCAL Keystore Encryption (BUI)" on page 560
■
LOCAL Keystore Encryption (CLI)" on page 563
"Configuring OKM Keystore Encryption (BUI)" on page 564
■
Keystore Encryption (CLI)" on page 565
3.
(Optional) Create a project using one of the LOCAL or OKM encryption keys.
For information about creating a project, see
4.
Create a share in a project that uses an encryption key or create a share using
one of the LOCAL or OKM encryption keys.
For information about creating a share, see
Encrypted Project (CLI)" on page
Related Topics
"Managing Encryption Keys" on page 582
■
"Performance Impact of Encryption" on page 584
■
"Encryption Key Life Cycle" on page 585
■
"Backing up and Restoring Encrypted Data" on page 585
■
Configuring LOCAL Keystore Encryption (BUI)
To configure encryption using the LOCAL keystore, first set up the master passphrase and then
create keys for assigning to encrypted shares. For information about encryption properties, see
"Encryption Properties" on page
560
Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016
"Encryption Properties" on page
"Creating a Project (BUI)" on page
"Shares and Projects" on page 343
567.
581.
581.
or
"Configuring
or
"Configuring OKM
or
"Configuring
or
"Configuring OKM
344.
or
"Creating an
Advertisement
Table of Contents
