Chapter 2 System Status
2.4 Key Management
Rebuilding to hot spares for which the key cannot be changed after SED failure is not performed. The
RAID group loses its redundancy ("
(only for High Reliability (RAID6-FR))).
When SED maintenance is being performed, replacing a SED with a new SED for which the key cannot
be changed does not complete successfully. If this action is performed, the status of the new SED
changes to "
When communication between the key server and the ETERNUS DX/AF returns to normal and the key
can be obtained, the SED status changes to normal. Rebuilding to the SED for which the status changed
to normal is performed after the key is changed. Note that "Modifying" may be displayed for the key
status for few minutes even though the SED key has already changed. After changing the key,
maintenance of the SEDs is complete.
Rebuilding or maintenance is performed by using the common key if changing of the key in the key
server fails due to a network error.
Even if the security level is changed from "High" to "Low", the rebuilding process does not start
immediately after the level is changed. Rebuilding processes start after the ETERNUS DX/AF recognizes
that changing of the security level and the key is complete.
The recovery mode for the key group is displayed. If no key groups are created, the field is blank.
The recovery mode is a method to recover locked (*1) RAID groups or SEDs after communication with the
key server is resolved. For RAID groups in locked status, "
A blocked status that occurs when the key of the RAID groups cannot be obtained.
This mode recovers locked RAID groups or SEDs when the communication error with the key server is
Use the [Recovery SED] function of ETERNUS Web GUI to recover the locked RAID groups or SEDs when
the communication error with the key server is resolved.
Key Expiration Date
The key expiration date is displayed. If no key groups are created, the field is blank.
When the key has expired, a new key is obtained from the key server and automatically applied in place of
the expired key.
Note that the display contents for this item changes as follows:
When the key status is "Modifying", the expiration date before the key was replaced is displayed.
When the key status is "Unregistered Server Certificate", "No SSL Certificate", "Network Error", "Not
Acquired", or "Key Server Error", a "-" (hyphen) is displayed.
YYYY-MM-DD (YYYY: Year (AD), MM: Month (01 - 12), DD: Date (01 - 31))
Exposed (Fast)" (only for High Reliability (RAID6-FR)), or "
Not Exist" is displayed.
ETERNUS Web GUI User's Guide (Operation)
Copyright 2016 FUJITSU LIMITED
Partially Exposed" (only for High Reliability
SED Locked" is displayed. For SEDs in locked
Partially Exposed (Fast)"