Chapter 3 Setup; Data Encryption - Fujitsu ETERNUS DX60 S2 User Manual

Chapter 3
This chapter describes the required settings for operation of the ETERNUS DX Disk storage
system and provides notes for setting up the ETERNUS DX Disk storage system.
3.1

Data Encryption

Encrypting data as it is being written to the disk prevents information leakage caused by fraudu-
lent decoding.
Even if a disk is removed and stolen by malicious third parties, data cannot be decoded.
The encryption function only encrypts the data stored on the disks, so server access results in
the transmission of plain text. Therefore, this function is effective against leakage of data being
transferred via sneaker net, but has no effect on data leakage via server access.
This section describes the restrictions and notes on encrypting data.
For details on the data encryption procedure, refer to "ETERNUS Web GUI User's Guide" or
"ETERNUS CLI User's Guide".
• Encrypted volumes cannot be changed to unencrypted volumes.
To cancel the encryption for a volume, back up the data in the encrypted volume, delete the
encrypted volume, and restore the backed up data.
• When copying encrypted volumes (using copy operations via server), transfer performance
may not be as good as when copying unencrypted volumes.
• Snap Data Pool Volumes (SDPVs) cannot be encrypted after they are created. To create an
encrypted SDPV, set encryption when creating a volume.
FUJITSU Storage ETERNUS DX60 S2 Disk storage system User's Guide -Operation-
Setup
Copyright 2014 FUJITSU LIMITED
43
P3AM-5512-07ENZ0