When are data encryption keys needed
After you set up the encryption environment, you will need data encryption keys to perform the following operations:
- Adding drives
A Free key is needed for each drive to allocate a DEK key.
- Replacing drives
A Free key is needed for each drive to change a DEK key.
- Adding or replacing
encrypting
back-end directors (EBEDs)
Six Free keys are needed for each EBED to create four CEK keys and two keys to register CEK keys.
- Updating CEK keys
For VSP G200, VSP G400, G600, and VSP F400, F600: Two Free keys for each disk board (Four Free keys per storage system) are needed to change CEK keys.
For VSP G800 and VSP F800:
Two Free keys for each disk board (16 free keys per storage system) are needed to change CEK keys.
If a problem occurs during an operation, extra keys might be needed to recover from the problem.