Primary and secondary backups of encryption keys
The storage system automatically creates and stores a primary backup of each encryption key. The Encryption License Key feature enables you to create secondary backups of the data encryption keys for the storage system. If the primary backup key is unavailable, the secondary backup is required to restore the key.
CautionIf the primary backup key becomes unavailable and no secondary backup key exists, the system cannot decrypt the encrypted data.
It is strongly recommended that you back up each encryption key or group of keys immediately after you create them and schedule regular weekly backups of all encryption keys to ensure data availability. You are responsible for storing the secondary backup keys securely.
It is also recommended that you back up each encryption key after you perform any of the following operations:
- Create encryption keys
- Add, remove, or replace drives
- Add, remove, or replace EBEDs
- Replace controllers
- Update CEKs
- Update KEKs
ImportantThe creation and secure storage of secondary backup encryption keys must be included as part of your corporate security policy.
Caution If you change time zone settings from a maintenance PC or on the SVP, you must restart the services of all storage systems in the Storage Device List window. Otherwise, regular backup is not performed as scheduled.