Encryption License Key Overview

Parent Topic

• Encryption License Key

  The VSP Gx00 models and VSP Fx00 models provide a performance-friendly AES-256-XTS encryption capability on the back-end I/O director. This capability protects data at rest on internal storage media (including disk drives and flash drives) attached to those directors. While many levels of encryption are available to the enterprise, protecting data at rest by using the array-level encryption of the storage system provides the following advantages: causes minimal to no performance impact within your operations, remains transparent to existing host servers and switches, shreds storage media by deleting the encryption key, simplifies key management to reduce the risk of the loss of encryption keys and data, and supports logging of encryption and key management events. In addition, many regulations encourage or require encryption of personally identifiable information (PII) and other sensitive data. Array-level encryption handles this type of data as well.

Child Topics

• Encryption License Key benefits
• Encryption License Key support specifications
• When to use encryption keys
• Primary and secondary backups of encryption keys
• Regularly scheduled encryption key backups

  An encryption key can be automatically backed up at scheduled intervals (for example, daily or weekly) at a specified time to the key management server. This operation is called a regular backup. You can specify the schedule for the regular backup in the Edit Encryption Environmental Settings window. Regular backups are performed automatically even when the user is not logged in.

• KMIP key management server support
• Implementing data encryption
• How to encrypt existing data

  To encrypt existing data, you must migrate the data to an encrypted parity group.

• Workflow for disabling encryption
• Workflow for changing the encryption key
• Audit logging of encryption events