Quantum DXi4701, User Manual

Page: 355 / 440

Chapter 9: DXi4701 Configuration
System
Quantum DXi4701 User’s Guide 329
Figure 179 Security Notice
Page
To add or update a security notice message, enter the message in the
box and click Apply .
Data-at-Rest Encryption
The
Data-at-Rest
page allows you to enable Data-at-Rest Encryption on
the DXi4701 and manage security keys.
Data-at-Rest Encryption uses Self Encrypting Drive (SED) technology to
secure all data stored on the DXi4701. This includes file data and
metadata, configuration files, and the DXi software and operating
system. To enable Data-at-Rest Encryption, you must supply a
passphrase. The passphrase ensures that all physical disks are paired
with their respective controllers, and that data can only be read back
from the disk by the same controller that wrote it. If a controller must
be replaced, the passphrase is needed to enable the new controller to
access the data on the physical disks.
To enable Data-at-Rest Encryption, the feature must be licensed, and all
of the drive controllers and hard drives (active and hot spares) in the DXi
must support Self Encrypting Drive (SED) technology (not available in all
regions). A DXi4701 configuration with all 4TB SED hard drives meets
the requirements for Data-at-Rest Encryption.