Dell PowerVault MD3260 Administrator's Guide - Page 67

Choosing An Appropriate Physical Disk Type, Physical Disk Security With Self Encrypting Disk

Page 67 highlights

A progress dialog is displayed, which indicates the number of virtual disks being changed. Choosing An Appropriate Physical Disk Type You can create disk groups and virtual disks in the storage array. You must select the capacity that you want to allocate for the virtual disk from either unconfigured capacity or free capacity available in the storage array. Then you define basic and optional advanced parameters for the virtual disk. With the advent of different physical disk technologies, it is now possible to mix physical disks with different media types and different interface types within a single storage array. Physical Disk Security With Self Encrypting Disk Self Encrypting Disk (SED) technology prevents unauthorized access to the data on a physical disk that is physically removed from the storage array. The storage array has a security key. Self encrypting disks provide access to data only through an array that has the correct security key. The self encrypting disk or a security capable physical disk encrypts data during writes and decrypts data during reads. For more information, see the online help topics. You can create a secure disk group from security capable physical disks. When you create a secure disk group from security capable physical disks, the physical disks in that disk group become security enabled. When a security capable physical disk has been security enabled, the physical disk requires the correct security key from a RAID controller module to read or write the data. All of the physical disks and RAID controller modules in a storage array share the same security key. The shared security key provides read and write access to the physical disks, while the physical disk encryption key on each physical disk is used to encrypt the data. A security capable physical disk works like any other physical disk until it is security enabled. Whenever the power is turned off and turned on again, all of the security enabled physical disks change to a security locked state. In this state, the data is inaccessible until the correct security key is provided by a RAID controller module. You can view the self encrypting disk status of any physical disk in the storage array from the Physical Disk Properties dialog. The status information reports whether the physical disk is: • Security capable • Secure - Security enabled or disabled • Read/Write Accessible - Security locked or unlocked You can view the self encrypting disk status of any disk group in the storage array. The status information reports whether the storage array is: • Security capable • Secure The following table shows how to interpret the security status of a disk group. Table 3. Interpretation of Security Status of Disk Group Secure Security Capable - Yes Security Capable - No Yes The disk group is composed of all SED Not applicable. Only SED physical disks can be in physical disks and is in a Secure state. a Secure state. No The disk group is composed of all SED The disk group is not entirely composed of SED physical disks and is in a Non-Secure state. physical disks. The Physical Disk Security menu is displayed in the Storage Array menu. The Physical Disk Security menu has the following options: 67

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175

A progress dialog is displayed, which indicates the number of virtual disks being changed.
Choosing An Appropriate Physical Disk Type
You can create disk groups and virtual disks in the storage array. You must select the capacity that you want to allocate
for the virtual disk from either unconfigured capacity or free capacity available in the storage array. Then you define
basic and optional advanced parameters for the virtual disk.
With the advent of different physical disk technologies, it is now possible to mix physical disks with different media types
and different interface types within a single storage array.
Physical Disk Security With Self Encrypting Disk
Self Encrypting Disk (SED) technology prevents unauthorized access to the data on a physical disk that is physically
removed from the storage array. The storage array has a security key. Self encrypting disks provide access to data only
through an array that has the correct security key.
The self encrypting disk or a security capable physical disk encrypts data during writes and decrypts data during reads.
For more information, see the online help topics.
You can create a secure disk group from security capable physical disks. When you create a secure disk group from
security capable physical disks, the physical disks in that disk group become security enabled. When a security capable
physical disk has been security enabled, the physical disk requires the correct security key from a RAID controller
module to read or write the data. All of the physical disks and RAID controller modules in a storage array share the same
security key. The shared security key provides read and write access to the physical disks, while the physical disk
encryption key on each physical disk is used to encrypt the data. A security capable physical disk works like any other
physical disk until it is security enabled.
Whenever the power is turned off and turned on again, all of the security enabled physical disks change to a security
locked state. In this state, the data is inaccessible until the correct security key is provided by a RAID controller module.
You can view the self encrypting disk status of any physical disk in the storage array from the Physical Disk Properties
dialog. The status information reports whether the physical disk is:
Security capable
Secure — Security enabled or disabled
Read/Write Accessible — Security locked or unlocked
You can view the self encrypting disk status of any disk group in the storage array. The status information reports
whether the storage array is:
Security capable
Secure
The following table shows how to interpret the security status of a disk group.
Table 3. Interpretation of Security Status of Disk Group
Secure
Security Capable - Yes
Security Capable - No
Yes
The disk group is composed of all SED
physical disks and is in a Secure state.
Not applicable. Only SED physical disks can be in
a Secure state.
No
The disk group is composed of all SED
physical disks and is in a Non-Secure state.
The disk group is not entirely composed of SED
physical disks.
The
Physical Disk Security
menu is displayed in the
Storage Array
menu. The
Physical Disk Security
menu has the
following options:
67