When are data encryption keys needed

After you set up the encryption environment, you will need data encryption keys to perform the following operations:

  • Adding drives

    A Free key is needed for each drive to allocate a DEK key.

  • Replacing drives

    A Free key is needed for each drive to change a DEK key.

  • Adding or replacing encryption disk adapters (encryption DKAs)

    Six Free keys are needed for each encryption DKA to create four CEK keys and two keys to register CEK keys.

  • Updating CEK keys

    For VSP G100, G200, VSP G400, G600, and VSP F400, F600: Two Free keys for each disk board (Four Free keys per storage system) are needed to change CEK keys.

    For VSP G800 and VSP F800:

    Two Free keys for each disk board (16 free keys per storage system) are needed to change CEK keys.

If a problem occurs during an operation, extra keys might be needed to recover from the problem.