Function
SED authentication key
Key Management Server Linkage
Key renewal (auto/manual)
No
Yes
Key compromise (*1)
No
Yes
Key backup
No
Yes
Target RAID groups
RAID groups (Standard, WSV, SDV), REC Disk Buffers, SDPs, TPPs, FTRPs, and
FTSPs (*2)
*1: The key becomes unavailable in the key server.
*2: The SED key group must be enabled after a pool or REC Disk Buffer is created, or after a pool capacity is
expanded.
An authentication key to access data of the RAID groups that are registered in a key group can be managed by
the key server.
RAID groups that use the same authentication key must be registered in the key group in advance.
Authentication for accessing the RAID groups that are registered in the key group is performed by acquiring the
key automatically from the key server when an ETERNUS DX is started.
As a key server for the key management server linkage, use a server that has the key management software
"ETERNUS SF KM" installed. IBM Security Key Lifecycle Manager can also be used as the key management soft-
ware.
Figure 41 Key Management Server Linkage
ETERNUS DX
RAID group
Global hot spare
Common key
Exclusive
authentication
key for a group
RAID group
RAID group
Key group
Key group
Key server
Business server
An ETERNUS DX uses the authentication key
that is stored in the key server in order to
unlock the encryption.
SEDs (RAID group) that are not registered in a key server are encrypted by using the authentication key (com-
mon key) that is stored in the ETERNUS DX.
A hot spare cannot be registered in a key group.
For Global Hot Spares, an authentication key can be specified according to the setting of the key group for the
RAID groups when a Global Hot Spare is configured as a secondary drive for the RAID groups that are registered
in the key group.
For Dedicated Hot Spares, an authentication key can be specified according to the setting of the key group for
the target RAID group when a Dedicated Hot Spare is registered.
2. Basic Functions
Data Encryption
70
FUJITSU Storage ETERNUS DX500 S4/DX600 S4, ETERNUS DX500 S3/DX600 S3 Hybrid Storage Systems Design Guide (Basic)
Copyright 2019 FUJITSU LIMITED
P3AM-7722-25ENZ0
Summary of Contents for ETERNUS DX500 S3/DX600 S3
Page 218: ......