Disabling data encryption
Disable data encryption at the parity-group level to perform (normal) formatting options on encrypted data, such as writing to or overwriting an LDEV.
Before you begin
- Create the secondary backups of the data encryption keys. See Backing up data encryption keys.
- Block the LDEVs in the parity group to be decrypted.
For details, see Blocking LDEVs in a parity group.
- You must have the Security Administrator (View & Modify) role.
- You must have the Storage Administrator (Provisioning) role to format volumes.
Procedure
Display the Device Manager - Storage Navigator main window.
Select Storage Systems in Explorer, and select Parity Groups.
In the tree that is shown, Internal or External are displayed.
Select the name for the parity group name you want to disable encryption and then click Edit Encryption.
In the Edit Encryption window, complete the following and then click Add:
- For Available Parity Groups, choose the parity group on which you want to disable data encryption.
- For Encryption, select Disable.
- For Format Type, choose the format type.
The parity group you selected from the Available Parity Groups list is added to the Selected Parity Groups list.
NoteWhen you click Add, Format Type becomes inactive and you cannot select the format type. If you want to change the format type, delete all parity groups in the Selected Parity Groups list and then select the format type again. You do not need to format volumes when there is no volume in the selected parity group. Therefore, the format type in the Selected Parity Groups list becomes "-" (a hyphen) regardless of the status of Format Type.In the Edit Encryption window, click Finish.
In the Confirm window, confirm the settings, and enter your task name in Task Name.
If you want the Task window to open after you click Apply, select Go to tasks window for status.Click Apply.
In the confirmation message that appears asking whether to apply the setting to the storage system, click OK.
Encryption is disabled for the parity group.