Fujitsu ETERNUS DX500 S3 Overview page 13

1. Overview
■
Security
Security and compliance are essential for the globalization of business activities and for the company's responsi-
bility in society.
An ETERNUS DX protects against external attacks and internal data leakage, ensures the reliability of informa-
tion, and manages information over long periods of time. A strong emphasis is placed upon encryption as a
measure against information leakage.
●
Data Encryption
In order to ensure full data security, the ETERNUS DX supports Self Encrypting Drives (SEDs).
Fraudulent decoding can be prevented by encrypting the drive data. Even if a drive is removed or a drive that is
removed for maintenance is stolen by malicious third parties during transportation, data cannot be decoded.
The SED encryption method is AES-256 (*3).
*3: Advanced Encryption Standard: Federal Information Processing Standards encryption method
●
Key Management Server Linkage
By managing the authentication keys in an external server that is connected with the network, the authentica-
tion keys can be managed more securely, thereby reducing management costs and minimizing the risk of infor-
mation leakage. The Key Management Interoperability Protocol (KMIP), which is a standard protocol for key
management, is used for key management server linkage.
●
Encrypted Network Transfer
Support of Secure Socket Layer (SSL) and Secure Shell (SSH), which enable encryption of the network data that is
transferred between the ETERNUS DX and the operation terminals, prevents any fraudulent access, alteration,
and information leakage from occurring.
■
Cloud Platform
Optimal storage virtualization that supports cloud computing can provide a flexible ICT environment.
The system administrator can assign virtual resources flexibly on an on-demand basis according to operation
load regardless of the physical devices by virtualizing all of the servers and storage systems and setting up a
virtual resource pool.
●
Disk Volume Virtualization
"Thin Provisioning", which is storage capacity virtualization technology, can reduce unused physical disks by allo-
cating only the required capacity as logical disks. This reduces the operational burden and the initial cost that is
required for upgrading the storage capacity (small start).
The ETERNUS DX has a function that balances writing areas on a volume basis to prevent concentrated access to
a specific RAID group in multiple RAID groups that configure a disk pool.
●
Deduplication/Compression
To reduce the amount of saved data, the Deduplication/Compression function eliminates data that is a duplicate
of the saved data, and compresses the deduplicated data. This allows a reduction in the number of drives and
drive capacity than before, and efficiently saves the increasing amount of data.
13
FUJITSU Storage ETERNUS DX500 S3/DX600 S3 Hybrid Storage Systems Overview
Copyright 2019 FUJITSU LIMITED
P3AM-7702-29ENZ0