4 security key setup, 1 sed key management-creation, Web browser-based configuration – Areca 24/4 Internal/External Port Pcie 3.0 12 Gb/s SAS/SATA Raid Controller 2Gb Cache User Manual
Page 169
169
WEB BROWSER-BASED CONFIGURATION
Instant Secure Erase (ISE) or Crypto Erase allows a drive to be
instantly erased using industry-standard commands and options.
An ISE RAID Set is a RAID Set that has been created by a group
of ISE only SAS hard disks on a controller. When you delete ex
-
isting SED RAID sets, there has one option available to perform
an Instant Secure Erase. The “Secure Erase The Member Disks”
function is the process of permanently erasing all data on the ISE
disks and resetting the security attributes. The data on the ISE
disk is lost.
To delete an ISE RAID set, click on the “Deleted ISE Raid Set”
link. A “Select The ISE RAID Set To Delete” screen is displayed
showing all exist ISE RAID sets in the current controller. Click on
the RAID set num-ber which you want to delete in the select col-
umn on the delete screen. Then, tick on the “Confirm The Opera
-
tion” check box and click on the “Submit” button in the screen to
delete it. The volume sets included in the “Delete ISE RAID Set”.
It will be deleted by this action. But for the Raid 30/50/60, you
need to delete the volumes belonging to those ISE RAID sets.
6.7.4 Security Key Setup
The Areca RAID controllers support Self-Encrypting Disks (SED)
for protection of data against loss or theft of SEDs. Protection is
achieved by the SED hard drive that automatically and continu-
ously encrypts the data on the drive without any user interaction.
There is one SED key per controller. You can manage the SED key
under McRAID manager. Local SED key management in the con-
troller firmware is designed to protect data from security breaches
with minimal cost and complexity. The key can be escrowed in to
a file using McRAID manager. Creating and managing SED key is
an important part of the cryptographic process. The key must be
kept secret from anyone who should not decrypt your data. This
section describes how to generate and manage keys.
6.7.4.1 SED Key Management-Creation
There is one SED key per controller which stores in the control-
ler flash memory. Areca provides both automatically or password
methods to generate a key.