Quantum DXi4701, User Manual

Page: 357 / 440

Chapter 9: DXi4701 Configuration
System
Quantum DXi4701 User’s Guide 331
• Save or e-mail a Data-at-Rest Recovery file to back up your
encryption keys (see Managing Recovery Files on page 332).
Checking Data-at-Rest Encryption Status
The current status of Data-at-Rest Encryption can be Disabled (default)
or Enabled . If it is enabled, all drives in the DXi4701 are securely
encrypted and cannot be read if removed from the system.
Click
Check Status to view detailed information about the status of
Data-at-Rest Encryption and to see if the DXi4701 supports all
requirements for enabling the feature.
Enabling Data-at-Rest Encryption
When Data-at-Rest Encryption is enabled, all hard drives in the DXi4701
are paired to their respective RAID controllers using encryption keys.
These keys are generated using a passphrase that you supply.
Note: Before you can enable Data-at-Rest Encryption, you must install
the required license (see Licensing Data-at-Rest Encryption on
page 378).
Caution:
Make sure you are certain you want to enable Data-at-Rest
Encryption before proceeding. After you enable Data-at-
Rest Encryption, you cannot disable it or turn it off.
To enable Data-at-Rest Encryption:
1 Verify that the system is in an optimal state:
• All hardware statuses on the system are Normal (see Hardware
on page 166).
Caution:
All storage arrays
must
show
Normal
condition
(see Storage Arrays on page 171). If any storage
arrays are degraded, do
not
enable Data-at-Rest
Encryption.
• All outstanding administration alerts are deleted (see Admin
Alerts on page 193).
• All service tickets are closed (see Service Tickets on page 195).