Data Encryption - Fujitsu Eternus DX80 S2 User Manual

Chapter 3 Setup

3.4 Data Encryption

3.4 Data Encryption
Encrypting data as it is being written to the drive prevents information leakage caused by fraudu-
lent decoding.
Even if a drive is removed and stolen by malicious third parties, data cannot be decoded.
The encryption function only encrypts the data stored on the drives, so server access results in
the transmission of plain text. Therefore, this function is effective against leakage of data being
transferred via sneaker net, but has no effect on data leakage via server access.
The restrictions and notes on encrypting data are described below.
For details on the data encryption procedure, refer to "ETERNUS Web GUI User's Guide" or
"ETERNUS CLI User's Guide".
• The encryption method for encrypted volumes cannot be changed. Encrypted volumes can-
not be changed to unencrypted volumes.
To change the encryption method or cancel the encryption for a volume, back up the data in
the encrypted volume, delete the encrypted volume, and restore the backed up data.
• It is recommended that the copy source volume and the copy destination volume use the
same encryption method for remote copy between encrypted volumes.
• When copying encrypted volumes (using Advanced Copy or copy operations via server),
transfer performance may not be as good as when copying unencrypted volumes.
• SDPVs cannot be encrypted after they are created. To create an encrypted SDPV, set
encryption when creating a volume.
• Thin Provisioning Volumes (TPVs) cannot be encrypted individually. Rather, the encryption
status of TPVs depends on that of the TPP to which the TPVs belong.
• Flexible Tier Volumes (FTVs) cannot be encrypted individually. Rather, the encryption status
of TPVs depends on that of the Flexible Tier Pool (FTRP) to which the FTVs belong.
ETERNUS DX80 S2/DX90 S2 Disk storage system User's Guide -Operation-
44
Copyright 2012 FUJITSU LIMITED P3AM-4842-03ENZ0