Key Management Server Linkage; Figure 3.1 System Configuration For Linking With The Key Management Server - Fujitsu ETERNUS DX80 S2 User Manual

Chapter 3 Setup

3.5 Key Management Server Linkage

3.5 Key Management Server Linkage
By linking with the key management server, the SEDs and the SED authentication key can be managed
separately and makes it possible to manage the authentication key more securely. Security requirements can
be satisfied by regularly changing the authentication key.
Note that ETERNUS SF KM is required when linking with the key management server.

Figure 3.1 System configuration for linking with the key management server

ETERNUS DX
Disk storage system
• To use the authentication key in a key server, a key group needs to be created. Multiple RAID groups can be
registered in a key group. Note that only one key group can be created in each ETERNUS DX Disk storage
system. Only one authentication key can be specified for each key group. The authentication key for a key
group can be changed.
• Setting a period of time for the validity of the authentication key in the key server by using the ETERNUS
DX Disk storage system enables the key to be automatically updated by obtaining a new authentication
key from the key server before the validity of the key expires. Access from the host (server) can be
maintained even if the SED authentication key is changed during operation.
• When linking with the key management server, the ETERNUS DX Disk storage system obtains the SED
authentication key from the key server and performs authentication when key management settings are
performed, key management information is displayed, and any of the following operations are performed.
- Turning on the ETERNUS DX Disk storage system
- Expanding the RAID group capacity (Logical Device Expansion)
- Forcibly enabling a RAID group
- Creating the key group
- Recovering SEDs
- Performing maintenance of drive enclosures
- Performing maintenance of disks
- Applying disk firmware
- Registering Dedicated Hot Spares
- Rebuilding and performing copy back (when using Global Hot Spares)
- Performing a redundant copy (when using Global Hot Spares)
- Turning on the disk motor with the Eco-mode
ETERNUS DX80 S2/DX90 S2 Disk storage system User's Guide -Operation-
Business server Business server
SAN
Copyright 2013 FUJITSU LIMITED
Key management server Key management server
(Master server) (Slave server)
Replication
50
LAN
P3AM-4842-12ENZ0