Fujitsu ETERNUS DX100 S4 Design Manual page 69

2. Basic Functions
Data Encryption
SEDs (RAID group) that are not registered in a key server are encrypted by using the authentication
key (common key) that is stored in the ETERNUS DX.
A hot spare cannot be registered in a key group.
For Global Hot Spares, an authentication key can be specified according to the setting of the key
group for the RAID groups when a Global Hot Spare is configured as a secondary drive for the RAID
groups that are registered in the key group.
For Dedicated Hot Spares, an authentication key can be specified according to the setting of the
key group for the target RAID group when a Dedicated Hot Spare is registered.
If a LAN connection cannot be secured during SED authentication, authentication fails because
•
the authentication key that is managed by the key server cannot be obtained.
To use the key server linkage function, a continuous connection to the LAN must be secured.
• To use the authentication key in a key server, a key group needs to be created. Multiple RAID
groups can be registered in a key group. Note that only one key group can be created in each
ETERNUS DX. One authentication key can be specified for each key group. The authentication
key for a key group can be changed.
Setting a period of time for the validity of the authentication key in the key server by using the
•
ETERNUS DX enables the key to be automatically updated by obtaining a new key from the
key server before the validity of the key expires. Access from the host (server) can be main-
tained even if the SED authentication key is changed during operation.
When linking with the key management server, the ETERNUS DX obtains the SED authentica-
•
tion key from the key server and performs authentication when key management settings are
performed, key management information is displayed, and any of the following operations are
performed.
- Turning on the ETERNUS DX
Expanding the RAID group capacity (Logical Device Expansion)
-
Forcibly enabling a RAID group
-
Creating the key group
-
- Recovering SEDs
- Performing maintenance of drive enclosures
Performing maintenance of drives
-
Applying disk firmware
-
Registering Dedicated Hot Spares
-
- Rebuilding and performing copy back (when using Global Hot Spares)
- Performing a redundant copy (when using Global Hot Spares)
Turning on the disk motor with the Eco-mode
-
Fujitsu Storage ETERNUS DX100 S4/DX200 S4, ETERNUS DX100 S3/DX200 S3 Hybrid Storage Systems Design Guide (Basic)
69
Copyright 2023 Fujitsu Limited
P3AM-7642-32ENZ0