Enabling encryption on a parity group that contains pool volumes

Use this procedure to enable encryption on a parity group that contains one or more pool volumes.

You can enable encryption on a parity group that contains pool volumes only under the following conditions:

  • The parity group must not contain any volumes, or all volumes in the parity group must be blocked. If the parity group contains any unblocked volumes, you must block the volumes before encryption can be enabled.
  • For VSP G1x00 and VSP F1500, if the parity group contains pool volumes, you must first delete the pool to which the pool volumes belong.
  • If the parity group consists of FMD DC2 or FMD HD drives, accelerated compression must not be enabled on the parity group. If accelerated compression is enabled on a parity group of FMD DC2 or FMD HD drives, you must disable accelerated compression before encryption can be enabled.

Before you begin

  • You must have the Security Administrator (View & Modify) role to enable encryption.
  • The encryption environmental settings must already be configured. For details, see Configuring the encryption environmental settings.
  • If the target parity group contains volumes, you must have the Storage Administrator (Provisioning) role to format the volumes.
  • You must have the Storage Administrator (Provisioning) role to format virtual volumes and disable capacity saving.
CautionEnabling encryption on a parity group is a destructive operation. Verify the correct parity group ID before performing this operation. You are responsible for backing up the data in the target parity group, if necessary, before performing this operation.

Procedure

  1. On the Explorer pane, click Storage Systems, expand Pools, and click the pool to which the target parity group belongs.

  2. Select the Virtual Volumes tab, and check the settings in the Capacity Saving Status column:

    • If the Capacity Saving Status of all virtual volumes is Disabled, go to the next step.
    • If the Capacity Saving Status of virtual volumes is not Disabled, perform the following actions for each virtual volume whose capacity saving status is not disabled:
      1. Block the virtual volume.
      2. Format the virtual volume.
      3. Disable the capacity saving setting on the virtual volume.
      4. Verify that Capacity Saving Status of the virtual volume shows Disabled.

  3. On the Virtual Volumes tab, check the LDEV status in the Status column of the table:

    • If the status of all LDEVs is Blocked, or if there are no LDEVs, go to the next step.
    • If the status of all LDEVs is not Blocked, block the LDEVs.
      NoteFor VSP G/F350, G/F370, G/F700, G/F900, you can use Device Manager - Storage Navigator to block pool volumes. For VSP G1x00 and VSP F1500, you cannot block pool volumes. If you want to enable encryption on a parity group that contains pool volumes, you must first delete the pool to which the pool volumes belong.

  4. Enable data encryption for the parity group as follows:

    1. On the Explorer pane, click Parity Groups.

    2. On the Parity Groups tab, select the target parity group, and then click Edit Encryption.

    3. In the Edit Encryption window, select the parity group, and then select Enable for Encryption.

      If the parity group contains unblocked volumes, or if accelerated compression is enabled for a parity group consisting of FMD DC2 or FMD HD drives, an error will occur when you perform this task.

    4. For Format Type, select Normal Format.

    5. Click Add.

      The parity group is added to the Selected Parity Groups list.

      If there are no volumes in the parity group, the format type in the Selected Parity Groups list is displayed as a hyphen (-).

    6. If you want to change the format type of a parity group in the Selected Parity Groups list, select the parity group, click Remove, and then add the parity group to the Selected Parity Groups list again with the desired format type.

    7. When you are finished adding parity groups to the Selected Parity Groups list, click Finish.

    8. In the Confirm window, confirm the settings, and enter your task name in Task Name.

      If you want the Tasks window to open after you click Apply, select Go to tasks window for status.

    9. Click Apply, and then click OK in the message that appears.

  5. Format the virtual volumes belonging to the pool you selected in step 1.

Next steps

If desired, you can now re-enable the capacity saving settings on the pool and virtual volumes.

  • To re-enable the capacity saving function of the volumes, set Capacity Saving to Compression or Deduplication and Compression in the Edit LDEVs window.

Parent Topic