HP XP7 Storage - Manual (Page 23)

Encryption formatting at the parity-group level
The LDEV formatting operation writes zero data to the entire area of all drives in the parity group,
or overwrites an LDEV. This process is also referred to as encryption formatting.
Unblocking LDEVs at the parity-group level
Unblock LDEVs at the parity-group level to protect the data after you format an LDEV at the
parity-group level. Unblocked LDEVs in the parity group have a status of “Unblocked”.
1.
From the RWC main window, click Explorer > Storage System > volume (resource).
2. On the LDEVs tab, complete the following and then click Unblock LDEVs:
•
For Parity Group, select the parity group to which the LDEV is associated.
•
For Logical Device, select the LDEV you want to unblock.
3. In the confirmation message that appears, click Apply.
The LDEV is unblocked.
Workflow for moving unencrypted data to an encrypted environment
Migrate existing data to new LDEVs in an encrypted parity group.
If you are migrating existing unencrypted data to an environment with encryption, the process
includes the following additional steps:
1. Move the unencrypted data from the HP XP7 Storage system to another storage system.
For more information about moving unencrypted data, contact HP Technical Support.
2. Create a new parity group. Your service representative creates parity groups using the SVP.
3. Enable data encryption on the parity group.
4. Format the LDEVs in the encrypted parity group.
5. Migrate the existing data to the new LDEVs in the encrypted parity group.
For more information about formatting LDEVs, see “Workflow for enabling data encryption
on parity groups” (page 20) .
For more information about migration practices with encryption, see “Migration practices with
encryption” (page 9) .
For more information about data migration services, contact HP Technical Support.
Workflow for restoring data encryption license keys
Restore a data encryption license key from the primary or secondary backup copy when all the
LDEVs belonging to an encrypted parity group are blocked or if an existing data encryption license
key becomes unavailable or you cannot use it. For example, a system failure occurred.
The system automatically restores data encryption license keys from the primary backup. You must
have Security Administrator (View & Modify) role to restore the data encryption license key from
a secondary backup data encryption license key.
CAUTION: When you restore the data encryption license key, always restore the latest key. If a
data encryption license key is updated after a secondary backup is performed, and the restored
key is not the latest key, drives and disk adapters will be blocked and will not be able to read
data.
Use the following process to restore a data encryption license key:
Workflow for moving unencrypted data to an encrypted environment 23