Enabling data encryption at the parity group-level

Data encryption is enabled at the parity-group level.

Before you begin

• You must have the Security Administrator (View & Modify) role.

• You must have the Storage Administrator (Provisioning) role to format volumes.

• The accelerated compression of the parity group must be disabled.

Procedure

1. Open the Encryption Keys window.

In Command Suite:

1. On the Resources tab, click Storage Systems, and then expand All Storage Systems.

2. Expand the target storage system, and then select Parity Groups.

In Device Manager - Storage Navigator:

1. Display the Device Manager - Storage Navigator main window.

2. Select Storage Systems in Explorer, and select Parity Groups.

2. In the Parity Groups table, select a specific parity group on which you want to enable encryption and then click Edit Encryption.

In the tree that is shown, Internal or External is displayed.

3. To select an internal LDEV, select Internal. Otherwise, click the Parity Groups tab.

4. In the Parity Groups table, select a specific parity group on which you want to enable encryption and then click Actions > Parity Group > Edit Encryption.

 If you do not select a specific parity group, data encryption is enabled on all of the parity groups in the list.

5. In the Edit Encryption window, complete the following and then click Add:

• For Available Groups, select the parity group for which you want to enable data encryption.

• For Encryption, select Enable to enable data encryption or select Disable to disable data encryption at the parity-group level.

• For Format Type, select the format type.

Values: Quick Format, Normal Format, or No Format

Default: Quick Format

  If accelerated compression of the parity group is enabled, do not select Enable for Encryption. If you select Enable for Encryption, an error occurs when performing the task.

The parity group you selected from the Available Parity Groups table is added to the Selected Parity Groups list.

When you click Add, Format Type becomes inactive and you cannot select the format type. If you want to change the format type, delete all parity groups in the Selected Parity Groups list and then select the format type again.

You do not need to format volumes when there is no volume selected in the parity group. Therefore, the format type in the Selected Parity Groups list becomes a hyphen (-) regardless of the status of the format type.

6. Click Finish.

7. In the Confirm window, confirm the settings, and enter your task name in Task Name.

If you want the Task window to open after you click Apply, select Go to tasks window for status.

Click Apply.

8. In the message that appears, click OK.

Data encryption is enabled on the parity group.

Related references

• Edit Encryption window