IBM ServeRAID-MR10is, User Manual

Page: 52 / 94

3-8 ServeRAID-MR10is SAS/SATA Controller Characteristics
3.3.6 Safety Characteristics
The ServeRAID-MR10is controller meets or exceeds the requirements of
UL flammability rating 94 V0. Each bare board is also marked with the
supplier name or trademark, type, and UL flammability rating. The board
is installed in a PCI Express bus slot, so all voltages are lower than the
SELV 42.4 V limit.
3.4 Data Encryption
The ServeRAID-MR10is controller offers data protection using the Data
Encryption (DE) feature. This feature protects data from theft and helps
meet regulatory compliance. The DE feature allows you to enable or
disable security through management of the keys on the controller and
physical drives.
Note: For the procedures used to implement the DE feature, refer
to the
ServeRAID-MR Software User’s Guide .
3.4.1 Support of Governmental Standards
As it applies to data encryption, the DE feature implements the XTS-AES
encryption algorithm, as defined by FIPS 197 and IEEE P1619, to satisfy
the Federal Information Processing Standard requirements set forth by
the National Institute of Standards and Technology. These standards are
used by non-military government agencies and contractors.
3.4.2 Characteristics of Volume Encryption Keys and Security Keys
There are two keys used in Data Encryption, the Security Key and the
Volume Encryption Key.
The controller uses the Security Key to lock and unlock access to the
secure user data. The Security Key is a key based on a user-provided
string. This key is encrypted into the security key blob and stored on the
controller.
Attention: If the Security Key is unavailable, your data will be
irretrievably lost. You must take all precautions so that you
never lose the security key.