Creating data encryption license keys

If you need to change a data encryption license key, create a new data encryption license key.

When you configure encryption environmental settings on the Edit Encryption Environmental Settings window for the first time, 1,018 Free keys or DEK keys are created. (This differs from the configuration. 1,018 keys are created if maximum disk adapters are installed). After that, you can create 1,024 Free keys or DEK keys. You can create up to 1,024 encryption keys per storage system.

When you configure encryption environmental settings on the Edit Encryption Environmental Settings window again, Free Keys are not created, and DEK keys and CEK keys are not updated. Keys that were created previously will be used.

Encryption keys are commonly created in the storage system. However, when the key management server is in use, and Generate Encryption Keys on Key Management Server is checked in the Edit Encryption Environmental Settings window, encryption keys will be created on the key management server, and used in the storage system.

After creating data encryption license keys, it is recommended that you back up each key.

Prerequisites

Required role: Security Administrator (View & Modify)

In Hitachi Command Suite:

On the Resources tab, click Storage Systems, and then expand All Storage Systems.

Expand the target storage system, and then select Encryption Keys.

In Device Manager - Storage Navigator:

Display the Device Manager - Storage Navigator main window.

Select Administration in Explorer, and select Encryption Keys.

Select the Encryption Keys tab.

From the Settings menu, select Security > Encryption Keys > Key Generation.

In the Create Keys window, specify the number of encryption keys you want to create. The encryption keys with the attribute of Free will be set. The key IDs will be automatically assigned.

To backup data encryption license keys to the key management server, click Next. Otherwise, click Finish.

In the Confirm window, confirm the settings, and enter your task name in Task Name.

If you want the Tasks window to open after you click Apply, select Go to tasks window for status.

Click Apply.

The new data encryption license key is created.