Dell PowerVault MD3200 Owner's Manual - Page 106

Creating a Security Key, Wizard - Disk Group Name and Physical Disk Selection dialog. The Create

Page 106 highlights

The Create a secure disk group option appears in the Create Disk Group Wizard - Disk Group Name and Physical Disk Selection dialog. The Create a secure disk group option is active only when these conditions are met: • A security key is installed in the storage array. • At least one security capable physical disk is installed in the storage array. • All of the physical disks that you selected on the Physical tab are security capable physical disks. You can erase security-enabled physical disks so that you can reuse the drives in another disk group or in another storage array. When you erase securityenabled physical disks, ensure that the data cannot be read. When all of the physical disks that you have selected in the Physical pane are security enabled, and none of the selected physical disks is part of a disk group, the Secure Erase option appears in the Physical Disk menu. The storage array password protects a storage array from potentially destructive operations by unauthorized users. The storage array password is independent from self encrypting disk, and should not be confused with the pass phrase that is used to protect copies of a security key. However, it is good practice to set a storage array password Creating a Security Key When you create a security key, it is generated by and securely stored by the array. You cannot read or view the security key. A copy of the security key must be kept on some other storage medium for backup in case of system failure or for transfer to another storage array. A pass phrase that you provide is used to encrypt and decrypt the security key for storage on other media. When you create a security key, you also provide information to create a security key identifier. Unlike the security key, you can read or view the security key identifier. The security key identifier is also stored on a physical disk or transportable media. The security key identifier is used to identify which key the storage array is using. 106 Configuration: Disk Groups and Virtual Disks

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260

106
Configuration: Disk Groups and Virtual Disks
The Create a secure disk group option appears in the Create Disk Group
Wizard - Disk Group Name and Physical Disk Selection dialog. The Create a
secure disk group option is active only when these conditions are met:
A security key is installed in the storage array.
At least one security capable physical disk is installed in the storage array.
All of the physical disks that you selected on the Physical tab are security
capable physical disks.
You can erase security-enabled physical disks so that you can reuse the drives
in another disk group or in another storage array. When you erase security-
enabled physical disks, ensure that the data cannot be read. When all of the
physical disks that you have selected in the Physical pane are security enabled,
and none of the selected physical disks is part of a disk group, the Secure
Erase option appears in the Physical Disk menu.
The storage array password protects a storage array from potentially
destructive operations by unauthorized users. The storage array password is
independent from self encrypting disk, and should not be confused with the
pass phrase that is used to protect copies of a security key. However, it is good
practice to set a storage array password
Creating a Security Key
When you create a security key, it is generated by and securely stored by the
array. You cannot read or view the security key. A copy of the security key must
be kept on some other storage medium for backup in case of system failure or
for transfer to another storage array. A pass phrase that you provide is used to
encrypt and decrypt the security key for storage on other media.
When you create a security key, you also provide information to create a
security key identifier. Unlike the security key, you can read or view the
security key identifier. The security key identifier is also stored on a physical
disk or transportable media. The security key identifier is used to identify
which key the storage array is using.