Chapter 9: Configuration
System
Quantum DXi6900 User’s Guide
343
drives in the DXi6900 are securely encrypted and cannot be read if removed from the system.
Click
Check Status
to view detailed information about the status of Data-at-Rest Encryption and to see if
the DXi6900 supports all requirements for enabling the feature.
When Data-at-Rest Encryption is enabled, all hard drives in the DXi6900 are paired to their respective RAID
controllers using encryption keys. These keys are generated using a passphrase that you supply.
Note:
Before you can enable Data-at-Rest Encryption, you must install the required license (see
Licensing Data-at-Rest Encryption and Obtaining Premium Feature Keys on page 370
). You must also
upload a Premium Feature Key (PFK) file for each Array module in the DXi6900 (see
).
Caution:
Make sure you are certain you want to enable Data-at-Rest Encryption before proceeding.
After you enable Data-at-Rest Encryption, you cannot disable it or turn it off.
To enable Data-at-Rest Encryption:
1. Verify that the system is in an optimal state:
l
All hardware statuses on the system are
Normal
).
Caution:
All storage arrays
must
show
Normal
). If any
storage arrays are degraded, do
not
enable Data-at-Rest Encryption.
l
All outstanding administration alerts are deleted (see
).
l
All service tickets are closed (see
).
2. Under
Enable Data-at-Rest Encryption
, type a security passphrase in the
Passphrase
box.
Caution:
If you are re-enabling Data-at-Rest Encryption, you
must
enter the same passphrase
that was used when encryption was originally enabled.
The passphrase must meet all of the following requirements:
l
Must be 8–32 characters long.
l
Must contain at least 1 digit [0–9].
l
Must contain at least 1 uppercase letter [A–Z].
l
Must contain at least 1 lowercase letter [a–z].
l
Must contain at least 1 non-alphanumerical character, for example, ‘+’ or ‘@’.
Note:
An underscore [ _ ] is considered an alphanumeric character.
l
Must
not
contain a space, tab, single quote [‘], double quote [“], or dollar sign [$].
3. Enter the passphrase again in the
Confirm Passphrase
box.
4. Click
Enable
.