Quantum DXi4701 User Manual page 357

Quantum DXi4701 User's Guide
• Save or e-mail a Data-at-Rest Recovery file to back up your
encryption keys (see
Checking Data-at-Rest Encryption Status
The current status of Data-at-Rest Encryption can be Disabled (default)
or Enabled. If it is enabled, all drives in the DXi4701 are securely
encrypted and cannot be read if removed from the system.
Click Check Status to view detailed information about the status of
Data-at-Rest Encryption and to see if the DXi4701 supports all
requirements for enabling the feature.
Enabling Data-at-Rest Encryption
When Data-at-Rest Encryption is enabled, all hard drives in the DXi4701
are paired to their respective RAID controllers using encryption keys.
These keys are generated using a passphrase that you supply.
Note: Before you can enable Data-at-Rest Encryption, you must install
the required license (see
page 378).
Caution: Make sure you are certain you want to enable Data-at-Rest
Encryption before proceeding. After you enable Data-at-
Rest Encryption, you cannot disable it or turn it off.
To enable Data-at-Rest Encryption:
1 Verify that the system is in an optimal state:
• All hardware statuses on the system are Normal (see
on page 166).
Caution: All storage arrays must show Normal condition
(see
arrays are degraded, do not enable Data-at-Rest
Encryption.
• All outstanding administration alerts are deleted (see
Alerts on page 193).
• All service tickets are closed (see
Chapter 9: DXi4701 Configuration
Managing Recovery Files
Licensing Data-at-Rest Encryption
Storage Arrays on page 171). If any storage
Service Tickets
System
on page 332).
on
Hardware
Admin
on page 195).
331