Enabling data encryption (for virtual volumes with deduplication function enabled)

Before you can enable data encryption on a parity group that includes virtual volumes for which the deduplication function is enabled, you must disable the deduplication function first and then enable data encryption.

Before you begin

  • You must have the Security Administrator (View & Modify) role.
  • You must have the Storage Administrator (Provisioning) role to format volumes.
  • The accelerated compression feature of the parity group must be disabled. If accelerated compression is enabled on the parity group, you cannot enable encryption (an error occurs).

Procedure

  1. Locate the pool to which the parity group you want to enable encryption belongs.

  2. Locate the virtual volumes for which Capacity Saving is set to Deduplication and Compression.

  3. Disable the capacity saving function for the virtual volumes in the parity group.

    1. Block the virtual volumes.

    2. Format the virtual volumes.

    3. Disable the capacity saving function of the virtual volumes by selecting Disable for Capacity Saving.

    4. Verify that the Capacity Saving Status shows Disabled.

  4. Disable the deduplication function of the pool by selecting No for Deduplication System Data Volume.

  5. Enable data encryption for the parity group.

    1. In the Parity Groups table, select the parity group on which you want to enable encryption and then click More Actions Edit Encryption.

      NoteIf you do not select a specific parity group, data encryption will be enabled on all of the parity groups in the list.

    2. In the Edit Encryption window, make the appropriate selections.

      • For Available Parity Groups, select the parity group for which you want to enable data encryption.
      • For Encryption, select Enable to enable data encryption for the selected parity group.
      • For Format Type, select the format type.

        You do not need to format volumes when there are no volumes in the selected parity group. Therefore, the format type in the Selected Parity Groups list becomes a hyphen (-) regardless of the status of the format type.

    3. Click Add.

      The parity group you selected from the Available Parity Groups table is added to the Selected Parity Groups list.

      After you click Add, Format Type becomes inactive and you cannot select the format type. If you want to change the format type, delete all parity groups in the Selected Parity Groups list and then select the format type again.

    4. Click Finish.

    5. In the Confirm window, confirm the settings, and enter your task name in Task Name.

      If you want the Task window to open after you click Apply, select Go to tasks window for status.

    6. Click Apply.

    7. In the message that appears, click OK.

  6. Re-enable the deduplication function of the pool by selecting Yes for Assign Deduplication System Data Volume.

  7. Re-enable the capacity saving function of the virtual volumes you disabled by setting Capacity Saving to Deduplication and Compression.

Parent Topic
  • Enabling encryption

    Encryption can be enabled only when the volumes in a parity group are blocked, or a parity group has no volume. Encryption cannot be enabled if a parity group has an unblocked volume.