Creating encryption keys

You can use Device Manager - Storage Navigator to create new encryption keys. Free keys or DEKs are created automatically when you configure the encryption environmental settings in the Edit Encryption Environmental Settings window for the first time. The number of keys created automatically depends on the number of installed encryption DKAs.

  • VSP G100, G200: The maximum number of encryption keys per storage system is 512. If the maximum number of encryption DKAs are installed, 506 keys are created automatically, so in this case you can create 6 more encryption keys.
  • VSP G400, G600, VSP F400, F600: The maximum number of encryption keys per storage system is 1,024. If the maximum number of encryption DKAs are installed, 1,018 keys are created automatically, so in this case you can create 6 more encryption keys.
  • VSP G800, VSP F800: The maximum number of encryption keys per storage system is 2,048. If the maximum number of encryption DKAs are installed, 2,024 keys are created automatically, so in this case you can create 24 more encryption keys.

Before you begin

  • You must have the Security Administrator (View & Modify) role.

Procedure

  1. Display the Device Manager - Storage Navigator main window.

  2. In the Explorer pane, select Administration, and then select Encryption Keys.

  3. On the Encryption Keys tab, click Create Keys.

  4. In the Create Keys window, specify the number of encryption keys you want to create. The encryption keys with the attribute of Free will be set. The key IDs will be automatically assigned.

  5. Click Finish.

  6. In the Confirm window, confirm the settings, and enter your task name in Task Name.

    If you want the Task window to open after you click Apply, select Go to tasks window for status.

  7. Click Apply.

Next steps

If you are not using a key management server, create secondary backups of the new encryption keys. For instructions, see Backing up the encryption keys to a file.

If you are using a key management server, the encryption keys are automatically backed up immediately after they are created. In addition, if you enabled the regular encryption key backup option, regular backups of the encryption keys will be performed daily according to the specified schedule.

Parent Topic