Function
SED authentication key
Key Management Server Linkage
Key backup
No
Yes
Target RAID groups
RAID groups (Standard, WSV, SDV, SDPV), REC Disk Buffers, TPPs, FTRPs, and FTSPs
(*2)
*1:
The key becomes unavailable in the key server.
*2:
After a pool is created or after the pool capacity is expanded, all the RAID groups that configure the pool must be added to the key
group. After a REC Disk Buffer is created, the RAID group that is registered as the REC Disk Buffer must be added to the key group.
An authentication key to access data of the RAID groups that are registered in a key group can be managed by
the key server.
RAID groups that use the same authentication key must be registered in the key group in advance.
Authentication for accessing the RAID groups that are registered in the key group is performed by acquiring the
key automatically from the key server when an ETERNUS AF is started.
As a key server for the key management server linkage, use a server that has the key management software
"ETERNUS SF KM" installed. IBM Security Key Lifecycle Manager can also be used as the key management
software.
Figure 36
Key Management Server Linkage
ETERNUS AF
RAID group
Global hot spare
Common key
Exclusive
authentication
key for a group
RAID group
RAID group
Key group
Key group
Key server
Business server
An ETERNUS AF uses the authentication key
that is stored in the key server in order to
unlock the encryption.
SEDs (RAID group) that are not registered in a key server are encrypted by using the authentication key
(common key) that is stored in the ETERNUS AF.
A hot spare cannot be registered in a key group.
When a Global Hot Spare is configured as a replacement drive for a RAID group that belongs to a key group, an
authentication key is specified according to the setting of the key group.
When a Dedicated Hot Spare is registered, an authentication key is specified according to the setting of the key
group for the target RAID group.
2. Basic Functions
Data Encryption
73
Design Guide
Summary of Contents for ETERNUS AF S3 Series
Page 204: ......
