Editing the password policy, Enabling data encryption at the parity group-level, Enabling data encryption at the parity – HP XP7 Storage User Manual

Page 20: Workflow for enabling data encryption on

Advertising
background image

Editing the password policy

You can set the minimum number of characters required for passwords.
1.

From the Settings menu, select Security > Encryption Key > Edit Password Policy (Backup
Encryption Keys).

2.

In the Edit Password Policy (Backup Encryption Keys) window, set the minimum number of
characters.

3.

Click Finish.

4.

In the Confirm window, complete the following and then click Apply:

Confirm the settings.

For Task Name, type the task name.

(Optional) Select Go to tasks window for status to open the Tasks window.

For more information, see

“Edit Password Policy (Backup Encryption Keys) wizard” (page 43)

.

Workflow for enabling data encryption on parity groups

The DKA Encryption feature provides data encryption at the parity-group level to protect data on
LDEVs.

Use the following process to set up for data encryption and enable data encryption on parity
groups:

1.

Back up the secondary data encryption license key.

For more information about backing up secondary keys, see

“Workflow for backing up

secondary data encryption license keys” (page 18)

.

2.

Block the LDEVs at the parity-group level. Do one of the following:

Block the LDEV using a file on the RWC computer.

For more information about blocking LDEVs using a file, see

“Blocking LDEVs using a file”

(page 24)

.

Block the LDEV on the key management server.

For more information about blocking LDEVs on the key management server, see

“Blocking

LDEVs on the key management server” (page 24)

.

3.

Enable data encryption on the parity group.

For more information about enabling data encryption on parity groups, see

“Enabling data

encryption at the parity group-level” (page 20)

.

4.

Format the LDEVs at the parity-group level.

For more information about formatting LDEVs in the parity group, see

“Workflow for enabling

data encryption on parity groups” (page 20)

.

Enabling data encryption at the parity group-level

Enable data encryption at the parity-group level. The Security Administrator (View & Modify) role
is required to enable encryption. The Storage Administrator (provisioning) role is also required if
you want to format volumes at the same time.
1.

In the Storage Systems tree, click Parity Groups.

In the tree that is shown, Internal or External is displayed.

2.

To select an internal LDEV, select Internal. Otherwise, click the Parity Groups tab.

3.

In the Parity Groups table, select a specific parity group on which you want to enable
encryption and then click Actions > Parity Group > Edit Encryption.

20

Managing data encryption license keys

Advertising
This manual is related to the following products: