Backing up data encryption keys

The or VSP F series storage systems automatically create a primary backup of the data encryption keys. You can also create secondary backups of the data encryption keys.

The backup of the encryption keys is performed to the existing DEK keys and CEK keys at the same time.

In addition, it is recommended that you back up all keys after you perform any of the following operations:

  • Creating encryption keys
  • Adding, removing, or replacing drives
  • Adding, removing, or replacing encryption DKAs
  • Updating CEK keys
  • Updating KEK keys