Dell DR4300 DR Series System Administrator Guide - Page 75

Enabling Encryption, Changing Encryption Settings, Key Rotation Interval in Days

Get Dell DR4300 PDF manuals and user guides View all Dell DR4300 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 75 highlights

The Encryption page is displayed, which displays the current encryption status of the DR Series system. 2. Click Set or Change Passphrase. The Set or Change Passphrase dialog box opens. 3. In the Passphrase and Confirm Passphrase text boxes, enter the passphrase to be used to encrypt content encryption keys. When creating a passphrase, follow these guidelines: • The passphrase string can take up to 256 characters. • Alphanumeric and special characters can be entered as part of the passphrase string. NOTE: Input/output operations for the DR Series system will halt during passphrase configuration, and the system will resume after passphrase submission. 4. Click the Submit button. Enabling Encryption To enable encryption for the DR Series system, complete the following steps: 1. Select Storage → Encryption. The Encryption page is displayed, which shows the current status of encryption of the DR Series system. 2. Click Encryption Settings. The Encryption Settings dialog box opens. 3. Next to Encryption, click ON. 4. Next to Mode, select the mode of key lifecycle management from one of the following options: • Static - A global, fixed key is used to encrypt all data. • Internal - Content encryption keys are generated and rotated on a specified period of days. 5. If you selected Internal as the mode of key management, next to Key Rotation Interval in Days, enter the number of days for key rotation when a new key is to be generated. In internal mode there is a maximum limit of 1023 keys. The default key rotation period is set to 30 days by default when the passphrase is set and/or encryption is turned on. You can later change the key rotation period from 7 days to 70 years for internal mode. 6. Click the Submit Encryption Settings button. After encryption is enabled, all of the data that is backed up is encrypted and is kept encrypted until it is expired and cleaned by the system cleaner. Note that encryption is an irreversible process. Changing Encryption Settings NOTE: Key modes can be changed at any time during the lifetime of the DR Series system; however, changing the key mode can be a significant operation to undertake as all encrypted data must be re-encrypted. To change current encryption settings, complete the following steps: 1. Select Storage → Encryption. The Encryption page is displayed, which lists the current status of encryption on the DR Series system. 2. Click Encryption Settings. The Encryption Settings dialog box opens. 3. Next to Mode, you can change the mode of key lifecycle management from one of the following options: 75

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
The Encryption page is displayed, which displays the current encryption status of the DR Series system.
2.
Click
Set or Change Passphrase
.
The
Set or Change Passphrase
dialog box opens.
3.
In the
Passphrase
and
Confirm Passphrase
text boxes, enter the passphrase to be used to encrypt content
encryption keys.
When creating a passphrase, follow these guidelines:
•
The passphrase string can take up to 256 characters.
•
Alphanumeric and special characters can be entered as part of the passphrase string.
NOTE:
Input/output operations for the DR Series system will halt during passphrase configuration, and the
system will resume after passphrase submission.
4.
Click the
Submit
button.
Enabling Encryption
To enable encryption for the DR Series system, complete the following steps:
1.
Select
Storage
→
Encryption
.
The
Encryption
page is displayed, which shows the current status of encryption of the DR Series system.
2.
Click
Encryption Settings
.
The
Encryption Settings
dialog box opens.
3.
Next to
Encryption
, click
ON
.
4.
Next to
Mode
, select the mode of key lifecycle management from one of the following options:
•
Static —
A global, fixed key is used to encrypt all data.
•
Internal
— Content encryption keys are generated and rotated on a specified period of days.
5.
If you selected Internal as the mode of key management, next to
Key Rotation Interval in Days
, enter the number of
days for key rotation when a new key is to be generated.
In internal mode there is a maximum limit of 1023 keys. The default key rotation period is set to 30 days by default
when the passphrase is set and/or encryption is turned on. You can later change the key rotation period from 7
days to 70 years for internal mode.
6.
Click the
Submit Encryption Settings
button.
After encryption is enabled, all of the data that is backed up is encrypted and is kept encrypted until it is expired and
cleaned by the system cleaner. Note that encryption is an irreversible process.
Changing Encryption Settings
NOTE:
Key modes can be changed at any time during the lifetime of the DR Series system; however, changing the
key mode can be a significant operation to undertake as all encrypted data must be re-encrypted.
To change current encryption settings, complete the following steps:
1.
Select
Storage
→
Encryption
.
The
Encryption
page is displayed, which lists the current status of encryption on the DR Series system.
2.
Click
Encryption Settings
.
The
Encryption Settings
dialog box opens.
3.
Next to
Mode
, you can change the mode of key lifecycle management from one of the following options:
75