Performing Dka Encryption Operations; Creating The Encryption Key; Backing Up The Encryption Key - HP StorageWorks P9000 User Manual

3 Performing DKA Encryption operations

Creating the encryption key

The encryption key can be created in preparation for the case where the change of the encryption
key is needed. Up to 32 encryption keys can be created per storage system. However, HP
recommends leaving at least 2 keys unused at all times so there is room to change an existing key.
Note that the encryption key cannot be created with the key ID that the encryption key has already
been created with.
To create the encryption key
1. Click Encryption Keys in the Administration tree.
2. Select the Encryption Keys tab on the right side of the window.
3. Select unused key ID.
4. On the menu bar, click Settings, Security, Encryption Keys, and then Create Keys. Or, select
Create Keys from the lower right of the window. The Create Keys window opens.
5. Confirm the settings and enter the task name in the Task Name box.
6. Click Apply in the Confirm window.
The task is registered. If the Go to tasks window for status check box is on, the Tasks window
appears.
For instructions on selecting the parity group and enabling the encryption, see
encryption" (page

Backing up the encryption key

You should back up the encryption key immediately when it is created, and you should schedule
regular backups (for example, once a week) to ensure data availability.
The encryption key cannot be backed up when there is no encryption key. Moreover, confirm other
processing is not registered in the task when you back up the encryption key. When other processing
is registered in the task, the encryption key cannot be backed up.
CAUTION:
If the primary backup becomes unavailable and there is no secondary backup, encrypted
data cannot be decrypted.
The user is responsible for storing the secondary backup securely.
To back up the encryption key
1. Click Encryption Keys in the Administration tree.
2. Select the Encryption Keys tab on the right side of the window.
3. Select a encryption Key.
4. On the menu bar, click Settings, Security, Encryption Keys, and then Backup Keys. Or, select
Backup Keys from the lower right of the window. The Backup Keys window opens.
5. Type the desired password in Password. This password will be required to restore the encryption
key. The requirements for the password are:
Length: minimum 6 characters, maximum 255 characters
Valid characters:
◦
◦
10 Performing DKA Encryption operations
11).
numbers (0-9),
uppercase letters (A-Z)
"Enabling data