Creating encryption keys

You can use Device Manager - Storage Navigator to create new encryption keys. Encryption keys are created automatically when you configure the encryption environmental settings in the Edit Encryption Environmental Settings window for the first time. The number of keys created automatically depends on the number of installed EBEDs.

  • VSP G1x00, VSP F1500: The maximum number of encryption keys per storage system is 4,096. If the maximum number of EBEDs are installed, 4,080 keys are created automatically, so in this case you can create 16 more encryption keys.
  • VSP G/F350, VSP G/F370: The maximum number of encryption keys per storage system is 1,024. If the maximum number of EBEDs are installed, 1,018 keys are created automatically, so in this case you can create 6 more encryption keys.
  • VSP G/F700: The maximum number of encryption keys per storage system is 4,096. If the maximum number of EBEDs are installed, 4,084 keys are created automatically, so in this case you can create 12 more encryption keys.
  • VSP G/F900: The maximum number of encryption keys per storage system is 4,096. If the maximum number of EBEDs are installed, 4,072 keys are created automatically, so in this case you can create 24 more encryption keys.

Before you begin

  • You must have the Security Administrator (View & Modify) role.

Procedure

  1. Display the Device Manager - Storage Navigator main window.

  2. In the Explorer pane, select Administration, and then select Encryption Keys.

  3. On the Encryption Keys tab, click Create Keys.

  4. In the Create Keys window, specify the number of encryption keys you want to create. The encryption keys with the attribute of Free will be set. The key IDs will be automatically assigned.

  5. Click Finish.

  6. In the Confirm window, confirm the settings, and enter your task name in Task Name.

    If you want the Task window to open after you click Apply, select Go to tasks window for status.

  7. Click Apply.

Next steps

If you are not using a key management server, create secondary backups of the new encryption keys. For instructions, see Backing up the encryption keys to a file.

If you are using a key management server, the encryption keys are automatically backed up immediately after they are created. In addition, if you enabled the regular encryption key backup option, regular backups of the encryption keys will be performed daily according to the specified schedule.

Parent Topic