Chapter 9: Configuration
System
Quantum DXi6900 User’s Guide
341
Figure 218:
Security Notice Page
To add or update a security notice message, enter the message in the box and click
Apply
.
Data-at-Rest Encryption
The
Data-at-Rest
page allows you to enable Data-at-Rest Encryption on the DXi6900 and manage security
keys.
DXi6900
Data-at-Rest Encryption uses Self Encrypting Drive (SED) technology to secure all data stored on the
DXi6900. This includes file data and metadata, configuration files, and the DXi software and operating
system. To enable Data-at-Rest Encryption, you must supply a passphrase. The passphrase ensures that
all physical disks are paired with their respective controllers, and that data can only be read back from the
disk by the same controller that wrote it. If a controller must be replaced, the passphrase is needed to enable
the new controller to access the data on the physical disks.
To enable Data-at-Rest Encryption, the feature must be licensed, and all of the drive controllers and hard
drives (active and hot spares) in the DXi must support Self Encrypting Drive (SED) technology (not available
in all regions). A DXi6900 configuration with all 4TB SED hard drives in the Array (RBOD)/Expansion
(EBOD) modules and 1.2 TB SED hard drives in the Node meets the requirements for Data-at-Rest
Encryption.
DXi6900-S
Data-at-Rest Encryption uses Self Encrypting Drive (SED) technology to secure all customer data stored on
the DXi6900-S Arrays. To enable Data-at-Rest Encryption, you must supply a passphrase. The passphrase
ensures that all physical disks are paired with their respective Array controllers, and that data can only be
read back from the disk by the same controller that wrote it. If a controller must be replaced, the passphrase
is needed to enable the new controller to access the data on the physical disks.
To enable Data-at-Rest Encryption, the feature must be licensed, and all of the drive controllers and hard
drives (active and hot spares) in the DXi must support Self Encrypting Drive (SED) technology (not available
in all regions). A DXi6900-S configuration with all 8 TB SED hard drives in the Array (RBOD)/Expansion
(EBOD) modules meets the requirements for Data-at-Rest Encryption.
