4 security key setup, 1 sed key management-creation, Web browser-based configuration – Areca 24/4 Internal/External Port Pcie 3.0 12 Gb/s SAS/SATA Raid Controller 2Gb Cache User Manual

Page 169

Advertising
background image

169

WEB BROWSER-BASED CONFIGURATION

Instant Secure Erase (ISE) or Crypto Erase allows a drive to be

instantly erased using industry-standard commands and options.

An ISE RAID Set is a RAID Set that has been created by a group

of ISE only SAS hard disks on a controller. When you delete ex

-

isting SED RAID sets, there has one option available to perform

an Instant Secure Erase. The “Secure Erase The Member Disks”

function is the process of permanently erasing all data on the ISE

disks and resetting the security attributes. The data on the ISE

disk is lost.

To delete an ISE RAID set, click on the “Deleted ISE Raid Set”

link. A “Select The ISE RAID Set To Delete” screen is displayed

showing all exist ISE RAID sets in the current controller. Click on

the RAID set num-ber which you want to delete in the select col-

umn on the delete screen. Then, tick on the “Confirm The Opera

-

tion” check box and click on the “Submit” button in the screen to

delete it. The volume sets included in the “Delete ISE RAID Set”.

It will be deleted by this action. But for the Raid 30/50/60, you

need to delete the volumes belonging to those ISE RAID sets.

6.7.4 Security Key Setup

The Areca RAID controllers support Self-Encrypting Disks (SED)

for protection of data against loss or theft of SEDs. Protection is

achieved by the SED hard drive that automatically and continu-

ously encrypts the data on the drive without any user interaction.

There is one SED key per controller. You can manage the SED key

under McRAID manager. Local SED key management in the con-

troller firmware is designed to protect data from security breaches

with minimal cost and complexity. The key can be escrowed in to

a file using McRAID manager. Creating and managing SED key is

an important part of the cryptographic process. The key must be

kept secret from anyone who should not decrypt your data. This

section describes how to generate and manage keys.

6.7.4.1 SED Key Management-Creation

There is one SED key per controller which stores in the control-

ler flash memory. Areca provides both automatically or password

methods to generate a key.

Advertising