dar (Data Encryption at Rest)
Checks for issues with Data Encryption. If the system is not licensed for Data Encryption.
Format of Possible dar Exception Messages
DAR -- "DAR Encryption status is unavailable"
DAR -- "DAR Encryption is enabled but not licensed"
DAR -- "DAR Encryption key needs backup"
DAR -- "There are <number> disks that are not Self Encrypting"
DAR -- "DAR Encryption status: <dar state>"
DAR -- "DAR EKM status is: <EKM status>"
dar Example 1
DAR -- "There are 5 disks that are not self-encrypting"
dar Suggested Action 1
Remove the drives that are not self-encrypting from the system because the non-encrypted drives
cannot be admitted into a system that is running with data encryption. Also, if the system is not yet
enabled for data encryption, the presence of these drives prevents data encryption from being
enabled.
dar Example 2
Dar -- "DAR Encryption key needs backup"
dar Suggested Action 2
Issue the controlencryption backup command to generate a password-enabled backup file.
dar Example 3
DAR -- DAR EKM status is: Error: Unable to access EKM.
Configuration or connection issue.
dar Suggested Action 3
Use the controlencryption status -d and controlencryption checkekm cli commands
to view more status about encryption. Check network status for nodes with shownetand shownet
-d cli commands. Check the EKM server's status and the network connections and status.
date
Checks the date and time on all nodes and reports an error if they are not the same.
Format of Possible date Exception Messages
Date -- "Date is not the same on all nodes"
Troubleshooting Storage System Components
43