Creating An Encrypted Project (Bui) - Oracle ZFS Storage Appliance Administration Manual

Creating an Encrypted Project (BUI)

Children:
hostname:shares encryption> okm
hostname:shares encryption okm> show
Properties:
Children:
To create an OKM key, use the following CLI commands:
2.
hostname:shares (pool-290-A) encryption okm keys>
hostname:shares (pool-290-A) encryption okm keys> create
hostname:shares (pool-290-A) encryption okm key-372 (uncommitted)> ls
Properties:
hostname:shares (pool-290-A) encryption okm key-372 (uncommitted)> set
keyname=anykey
hostname:shares (pool-290-A) encryption okm key-372 (uncommitted)> commit
Creating an Encrypted Project (BUI)
Shares (filesystems and LUNs) can be encrypted individually or they can be encrypted at the
project level because shares inherit project properties. The following example shows how to
encrypt all shares within a project by encrypting the project itself.
To use encryption, you must configure it first; see
Before You Begin
1. Navigate to Shares > Projects.
2.
Click the Add icon
3. Name the project.
4. Set an encryption key length.
5. Choose LOCAL or OKM for the keystore.
566 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016
okm => Manage encryption keys
local => Manage encryption keys
agent_id = ExternalClient041
registration_pin = *********
server_addr = 10.80.180.109
keys => Manage this Keystore's Keys
cipher = AES
keyname = (unset)
keyname = anykey (uncommitted)
.
"Data Encryption" on page 559.