Document Outline

• HP XP7 DKA Encryption User Guide
• Contents
• 1 DKA Encryption Overview
  • DKA Encryption benefits
  • DKA Encryption support specifications
  • When are data encryption license keys needed
  • Primary and secondary data encryption license keys
  • KMIP key management server support
  • Data encryption workflow
    • Data encryption on existing data workflow
  • Disable encrypted data workflow
  • Change data encryption license key workflow
    • Migration practices with encryption
  • Audit logging of encryption events
  • Encryption states and protection
  • Interoperability with other software applications
• 2 DKA Encryption Installation
  • DKA Encryption installation workflow
  • System requirements
  • Enabling the DKA Encryption feature
  • Disabling the DKA Encryption feature
• 3 Key Management Server Connections
  • Key management server requirements
    • Root and client certificates
      • Root certificate on the key management server
      • Client certificate password
    • Preparing the client certificate workflow
      • Private key file creation workflow
      • Creating a private SSL key file
      • Creating a public SSL key file
      • Converting the client certificate to the PKCS#12 format
      • Uploading the root and client certificate
  • Uploading the root and client certificate
• 4 Managing data encryption license keys
  • Workflow for creating data encryption license keys
    • Creating data encryption license keys
    • Workflow for backing up secondary data encryption license keys
      • Backing up keys as a file
      • Backing up keys to a key management server
      • Opening the Backup Keys to Server window using the Encryption window
      • Opening the Backup Keys to Server window using the View Backup Keys on Server window
      • Viewing backup data encryption license keys
  • Editing the password policy
  • Workflow for enabling data encryption on parity groups
    • Enabling data encryption at the parity group-level
  • Workflow for disabling data encryption at the parity-group level
    • Blocking LDEVs at the parity-group level
    • Disabling data encryption at the parity-group level
    • Encryption formatting at the parity-group level
    • Unblocking LDEVs at the parity-group level
  • Workflow for moving unencrypted data to an encrypted environment
  • Workflow for restoring data encryption license keys
    • Blocking LDEVs using a file
    • Blocking LDEVs on the key management server
    • Restoring keys from a file
    • Restoring keys from a key management server
      • Selecting the data encryption license key from the View Backup Keys on Server window
      • Selecting the data encryption license key from the Restore Keys from Server window
  • Workflow for changing data encryption license keys
  • Workflow for deleting data encryption license keys
    • Deleting data encryption license keys
    • Deleting backup data encryption license keys from the server
  • Viewing encryption keys backed up on the key management server
  • Exporting encryption license key table information
  • Rekeying key encryption keys
  • Retrying Key Encryption Key Acquisition
  • Initialize the connection settings to the key management server
• 5 Troubleshooting
  • Encryption events in the audit log
    • DKA Encryption processes that the audit log records
  • Problems and solutions
• 6 Support and other resources
  • Contacting HP
    • Subscription service
    • Documentation feedback
  • Related information
    • HP websites
  • Conventions for storage capacity values
  • Typographic conventions
• A DKA Encryption GUI Reference
  • Encryption Keys window
  • Edit Encryption Environmental Settings wizard
    • Edit Encryption Environmental Settings window
    • Confirm window in the Edit Encryption Environmental Settings wizard
  • Create Keys wizard
    • Create Keys window
    • Confirm window in the Create Keys wizard
  • Edit Password Policy (Backup Encryption Keys) wizard
    • Edit Password Policy (Backup Encryption Keys) window
    • Confirm window in the Edit Password Policy (Backup Encryption Keys) wizard
  • Backup Keys to File wizard
    • Backup Keys to File window
    • Confirm window in the Backup Keys to File wizard
  • Backup Keys to Server wizard
    • Backup Keys to Server window
    • Confirm window in the Backup Keys to Server wizard
  • Restore Keys from file wizard
    • Restore Keys from File window
    • Confirm window in the Restore Keys wizard
  • Restore Keys from Server wizard
    • Restore Keys from Server window
    • Confirm window in the Restore Keys from Server wizard
  • Delete Keys wizard
    • Delete Keys window
    • Confirm window in the Delete Keys wizard
  • Delete Backup Keys on Server window
  • View Backup Keys on Server window
  • Edit Encryption wizard
    • Edit Encryption window
    • Confirm window in the Edit Encryption wizard
  • Rekey Key Encryption Key window
  • Retry Key Encryption Key Acquisition window
• Glossary
• Index