Chapter 10: Utilities
Secure Shred
Quantum DXi6900 User’s Guide
371
a. Enter the system serial number in the
Serial Number
box and click
Submit
.
b. Enter the authorization code (printed on the License Certificate) and click
Get License Key
.
c. Enter the
Feature ID
for each storage array.
If entering more than one Feature ID, make sure to enter the correct Feature ID for Storage Array
1 (Qarray1) and Storage Array 2 (Qarray2) Storage Array 1 (Qarray1), Storage Array 2 (Qarray2),
and Storage Array 3 (Qarray3).
d. Click
Get License Key
.
The
License Key Details
section displays the Data-at-Rest Encryption license key. Print out or
write down the license key, or save it to a text file.
e. For each Storage Array, click
Generate PFK File
to generate a Premium Feature Key file, and
then click
Save
to save the PFK file to your computer.
Note:
Make sure to keep a copy of the PFK files for backup purposes.
3. In the DXi remote management console, on the
Utilities > License Keys
page, enter the Data-at-
Rest Encryption license key in the
New Key
box, and then click
Add
.
The Data-at-Rest Encryption license key is added to the system.
4. In the DXi remote management console, navigate to the
Configuration > System > Security >
Data-at-Rest
page and perform the following steps:
a. Upload the correct PFK file to each Storage Array (see
Uploading a PFK File on page 345
)
b. Enable Data-at-RestEncryption for all hard drives in the DXi6900 (see
).
c. Make a backup copy of your encryption keys (see
Managing Recovery Files on page 344
).
Secure Shred
The
Secure Shred
page allows you to securely and permanently erase sensitive data stored on the
DXi6900. To securely erase data, first delete files on NAS shares or storage servers, or erase tape
cartridges on VTL partitions, then start secure shred. During secure shred, all residual data associated with
the deleted files or cartridges is securely erased from the disk drives by performing a single-pass overwrite
with zeros.
While secure shred is running, the DXi6900 operates in limited mode. This means you cannot perform
backups or restores, all scheduled jobs (including replication jobs) are stopped, and you cannot access or
use any other features of the DXi. If necessary, you can cancel secure shred at any time and return the DXi
to normal operation.
Caution:
The secure shred process can take multiple days to complete.
To access the
Secure Shred
page, click the
Utilities
menu, and then click the
Secure Shred
tab (see
).
