Dell PowerVault MD3260 Administrator's Guide - Page 68

Creating A Security Key, Create Disk Group Wizard-Disk Group Name

Page 68 highlights

• Create Key • Change Key • Save Key • Validate Key • Import Key • Unlock Drives NOTE: If you have not created a security key for the storage array, the Create Key option is active. If you have created a security key for the storage array, the Create Key option is inactive with a check mark to the left. The Change Key option, the Save Key option, and the Validate Key option are now active. The Secure Physical Disks option is displayed in the Disk Group menu. The Secure Physical Disks option is active if these conditions are true: • The selected storage array is not security enabled but is comprised entirely of security capable physical disks. • The storage array contains no snapshot base virtual disks or snapshot repository virtual disks. • The disk group is in an Optimal state. • A security key is set up for the storage array. NOTE: The Secure Physical Disks option is inactive if these conditions are not true. The Secure Physical Disks option is inactive with a check mark to the left if the disk group is already security enabled. The Create a secure disk group option is displayed in the Create Disk Group Wizard-Disk Group Name and Physical Disk Selection dialog. The Create a secure disk group option is active only when these conditions are met: • A security key is installed in the storage array. • At least one security capable physical disk is installed in the storage array. • All of the physical disks that you selected on the Hardware tab are security capable physical disks. You can erase security enabled physical disks so that you can reuse the drives in another disk group or in another storage array. When you erase security enabled physical disks, ensure that the data cannot be read. When all of the physical disks that you have selected in the Physical Disk type pane are security enabled, and none of the selected physical disks is part of a disk group, the Secure Erase option is displayed in the Hardware menu. The storage array password protects a storage array from potentially destructive operations by unauthorized users. The storage array password is independent from self encrypting disk, and should not be confused with the pass phrase that is used to protect copies of a security key. However, it is good practice to set a storage array password. Creating A Security Key When you create a security key, it is generated by and securely stored by the array. You cannot read or view the security key. A copy of the security key must be kept on some other storage medium for backup in case of system failure or for transfer to another storage array. A pass phrase that you provide is used to encrypt and decrypt the security key for storage on other media. When you create a security key, you also provide information to create a security key identifier. Unlike the security key, you can read or view the security key identifier. The security key identifier is also stored on a physical disk or transportable media. The security key identifier is used to identify which key the storage array is using. To create a security key: 1. In the AMW, from the menu bar, select Storage Array → Security → Physical Disk Security → Create Key . 2. Perform one of these actions: 68

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175

Create Key
Change Key
Save Key
Validate Key
Import Key
Unlock Drives
NOTE:
If you have not created a security key for the storage array, the
Create Key
option is active. If you have
created a security key for the storage array, the
Create Key
option is inactive with a check mark to the left. The
Change Key
option, the
Save Key
option, and the
Validate Key
option are now active.
The
Secure Physical Disks
option is displayed in the
Disk Group
menu. The
Secure Physical Disks
option is active if
these conditions are true:
The selected storage array is not security enabled but is comprised entirely of security capable physical disks.
The storage array contains no snapshot base virtual disks or snapshot repository virtual disks.
The disk group is in an Optimal state.
A security key is set up for the storage array.
NOTE:
The
Secure Physical Disks
option is inactive if these conditions are not true.
The
Secure Physical Disks
option is inactive with a check mark to the left if the disk group is already security enabled.
The
Create a secure disk group
option is displayed in the
Create Disk Group Wizard–Disk Group Name
and
Physical Disk
Selection
dialog. The
Create a secure disk group
option is active only when these conditions are met:
A security key is installed in the storage array.
At least one security capable physical disk is installed in the storage array.
All of the physical disks that you selected on the
Hardware
tab are security capable physical disks.
You can erase security enabled physical disks so that you can reuse the drives in another disk group or in another
storage array. When you erase security enabled physical disks, ensure that the data cannot be read. When all of the
physical disks that you have selected in the Physical Disk type pane are security enabled, and none of the selected
physical disks is part of a disk group, the
Secure Erase
option is displayed in the
Hardware
menu.
The storage array password protects a storage array from potentially destructive operations by unauthorized users. The
storage array password is independent from self encrypting disk, and should not be confused with the pass phrase that
is used to protect copies of a security key. However, it is good practice to set a storage array password.
Creating A Security Key
When you create a security key, it is generated by and securely stored by the array. You cannot read or view the
security key. A copy of the security key must be kept on some other storage medium for backup in case of system failure
or for transfer to another storage array. A pass phrase that you provide is used to encrypt and decrypt the security key
for storage on other media.
When you create a security key, you also provide information to create a security key identifier. Unlike the security key,
you can read or view the security key identifier. The security key identifier is also stored on a physical disk or
transportable media. The security key identifier is used to identify which key the storage array is using.
To create a security key:
1.
In the AMW, from the menu bar, select
Storage Array
Security
Physical Disk Security
Create Key
.
2.
Perform one of these actions:
68