Enabling encryption on a parity group that contains pool volumes

Use this procedure to enable encryption on a parity group that contains one or more pool volumes.

You can enable encryption on a parity group only under the following conditions:

  • When the parity group does not contain any volumes, or when all volumes in the parity group are blocked. If the parity group contains any unblocked volumes, you must block the volumes before encryption can be enabled. For instructions, see the Provisioning Guide.
  • When accelerated compression is not enabled on the parity group. If accelerated compression is enabled, you must disable accelerated compression before encryption can be enabled. For instructions, see the Provisioning Guide.

Before you begin

  • You must have the Security Administrator (View & Modify) role to enable encryption.
  • The encryption environmental settings must already be configured. For details, see Configuring the encryption environmental settings.
  • If the target parity group contains volumes, you must have the Storage Administrator (Provisioning) role to format the volumes.
  • You must have the Storage Administrator (Provisioning) role to format virtual volumes and disable capacity saving.
CautionEnabling encryption on a parity group is a destructive operation. Verify the correct parity group ID before performing this operation. You are responsible for backing up the data in the target parity group, if necessary, before performing this operation.

Procedure

  1. In the Explorer pane, expand the Storage Systems tree, expand Pools, and click the pool to which the target parity group belongs.

  2. Select the Virtual Volumes tab, and check the settings in the Capacity Saving Status column:

    • If the Capacity Saving Status of all virtual volumes is Disabled, go to the next step.
    • If the Capacity Saving Status of virtual volumes is not Disabled, perform the following actions for each virtual volume whose capacity saving status is not disabled:
      1. Block the virtual volume.
      2. Format the virtual volume.
      3. Disable the capacity saving setting on the virtual volume.
      4. Verify that Capacity Saving Status of the virtual volume shows Disabled.

  3. When the Capacity Saving Status for all virtual volumes in the pool shows Disabled, check the deduplication setting for the pool (in the Deduplication row):

    • If Not Available or a hyphen is displayed, go to the next step.
    • If Available is displayed, open the Edit Pools window, and select No for Assign Deduplication System Data Volume.

  4. On the Virtual Volumes tab, check the LDEV status in the Status column of the table:

    • If the status of all LDEVs is Blocked, or if there are no LDEVs, go to the next step.
    • If the status of all LDEVs is not Blocked, block the LDEVs.

  5. Enable data encryption for the parity group as follows:

    1. In the Explorer pane, select Parity Groups.

    2. On the Parity Groups tab, select the target parity group, and then click Edit Encryption.

    3. In the Edit Encryption window, select the parity group, select Enable for Encryption, and select Normal Format for Format Type.

    4. Click Add.

      The parity group is added to the Selected Parity Groups list.

      If there are no volumes in the parity group, the format type in the Selected Parity Groups list is displayed as a hyphen (-).

    5. If you want to change the format type of a parity group in the Selected Parity Groups list, select the parity group, click Remove, and then add the parity group to the Selected Parity Groups list again with the desired format type.

    6. When you are finished adding parity groups to the Selected Parity Groups list, click Finish.

    7. In the Confirm window, confirm the settings, and enter your task name in Task Name.

      If you want the Task window to open after you click Apply, select Go to tasks window for status.

    8. Click Apply, and then click OK in the message that appears.

  6. Format the virtual volumes belonging to the pool you selected in step 1.

Next steps

If desired, you can now re-enable the capacity saving settings on the pool and virtual volumes.

  • To re-enable the deduplication function of the pool, select Yes for Assign Deduplication System Data Volume in the Edit Pools window.
  • To re-enable the capacity saving function of the volumes, set Capacity Saving to Compression or Deduplication and Compression in the Edit LDEVs window.

Parent Topic