Lenovo ThinkServer RD330, Руководство пользователя программного обеспечения

Страница: 50 / 401

Page 50
MegaRAID SAS Software User Guide Chapter 3: SafeStore Disk Encryption
|
Instant Secure Erase
3.4.3.1 Simple Configuration
If you select simple configuration, select the redundancy type and drive security
method to use for the drive group.
See Section 8.1.4, Creating a Virtual Drive Using Simple Configuration for the procedures
used to select the redundancy type and drive security method for a configuration.
3.4.3.2 Advanced Configuration
If you select advanced configuration, select the drive security method, and add the
drives to the drive group.
See Section 8.1.5, Creating a Virtual Drive Using Advanced Configuration for the
procedures used to import a foreign configuration.
After the drive group is secured, you cannot remove the security without deleting the
virtual drives.
3.4.4 Import a Foreign Configuration
After you create a security key, you can run a scan for a foreign configuration and
import a locked configuration. (You can import unsecured or unlocked configurations
when security is disabled.) A foreign configuration is a RAID configuration that already
exists on a replacement set of drives that you install in a computer system. WebBIOS
Configuration Utility and MSM allows you to import the existing configuration to the
RAID controller or clear the configuration so you can create a new one.
See Section 4.8, Viewing and Changing Device Properties for the procedure used to
import a foreign configuration in WebBIOS or Section 11.5.12, Importing or Clearing a
Foreign Configuration for the procedure in MegaRAID Storage Manager.
To import a foreign configuration, you must first enable security to allow importation of
locked foreign drives. If the drives are locked and the controller security is disabled, you
cannot import the foreign drives. Only unlocked drives can be imported when security
is disabled.
After you enable the security, you can import the locked drives. To import the locked
drives, you must provide the security key used to secure them. Verify whether any
drives are left to import as the locked drives can use different security keys. If there are
any drives left, repeat the import process for the remaining drives. After all of the drives
are imported, there is no configuration to import.
3.5 Instant Secure Erase
Instant Secure Erase is a feature used to erase data from encrypted drives. After the
initial investment for an encrypted disk, there is no additional cost in dollars or time to
erase data using the Instant Secure Erase feature.
You can change the encryption key for all MegaRAID RAID controllers that are
connected to encrypted drives. All encrypted drives, whether locked or unlocked,
always have an encryption key. This key is set by the drive and is always active. When
the drive is unlocked, the data to host from the drive (on reads) and from the host to
the drive cache (on writes) is always provided. However, when resting on the drive
platters, the data is always encrypted by the drive.
You might not want to lock your drives because you have to manage a password if they
are locked. Even if you do not lock the drives, there is still a benefit to using encrypted
disks.
If you are concerned about data theft or other security issues, you might already invest
in drive disposal costs, and there are benefits to using SafeStore encryption over other
technologies that exists today, both in terms of the security provided and time saved.