Enabling data encryption

Data encryption is enabled at the parity-group level.

This procedure describes how to enable data encryption on a parity group in which the deduplication function is not enabled for the pool to which the parity group belongs.

Before you begin

  • Block the volumes in the parity group to be encrypted.
  • You must have the Security Administrator (View & Modify) role.
  • You must have the Storage Administrator (Provisioning) role to format volumes.
  • The accelerated compression feature of the parity group must be disabled. If accelerated compression is enabled on the parity group, you cannot enable encryption (an error occurs).

Procedure

  1. If virtual volumes (V-VOLs) are used in the target parity group, locate and block the V-VOLs as follows:

    1. Expand Storage Systems in the Explorer pane, and then expand Pools.

    2. Locate and select the pool that contains the V-VOLs in the target parity group.

    3. On the Virtual Volumes tab, select the V-VOLs in the target parity group.

    4. Click More Actions Block Volumes.

    When all volumes and V-VOLs in the target parity group are blocked, you can enable encryption.

  2. In the Explorer pane, select Parity Groups.

  3. In the Parity Groups table, select the parity group on which you want to enable encryption and then click More Actions Edit Encryption.

    NoteIf you do not select a specific parity group, data encryption will be enabled on all of the parity groups in the list.

  4. In the Edit Encryption window, make the appropriate selections.

    • For Available Parity Groups, select the parity group for which you want to enable data encryption.
    • For Encryption, select Enable to enable data encryption for the selected parity group.
    • For Format Type, select the format type.

      You do not need to format volumes when there are no volumes in the selected parity group. Therefore, the format type in the Selected Parity Groups list becomes a hyphen (-) regardless of the status of the format type.

  5. Click Add.

    The parity group you selected from the Available Parity Groups table is added to the Selected Parity Groups list.

    After you click Add, Format Type becomes inactive and you cannot select the format type. If you want to change the format type, delete all parity groups in the Selected Parity Groups list and then select the format type again.

  6. Click Finish.

  7. In the Confirm window, confirm the settings, and enter your task name in Task Name.

    If you want the Task window to open after you click Apply, select Go to tasks window for status.

  8. Click Apply.

  9. In the message that appears, click OK.

  10. If the target parity group contains V-VOLs that you blocked in step 1, format the V-VOLs.

Parent Topic
  • Enabling encryption

    Encryption can be enabled only when the volumes in a parity group are blocked, or a parity group has no volume. Encryption cannot be enabled if a parity group has an unblocked volume.