HP XP7 Storage - Manual (Page 26)

Workflow for changing data encryption license keys
Encrypt data with a different data encryption license key.
Use the following process to change the data encryption license key:
1. Create a new parity group.
2. Enable encryption with the new data encryption license key.
For more information about enabling data encryption at the parity-group level, see “Enabling
data encryption at the parity group-level” (page 20) .
3. Format the LDEVs in the encrypted parity group.
For more information about formatting LDEVs in the encrypted parity groups, see “Workflow
for backing up secondary data encryption license keys” (page 18) .
4. Migrate the existing data to the new LDEVs in the encrypted parity group.
For more information about data migration services, contact HP Technical Support.
For more information about migration practices with encryption, see “Migration practices with
encryption” (page 9) .
5. Encrypt the data with the new data encryption license key on the HP XP7 Storage system.
Workflow for deleting data encryption license keys
Delete a data encryption license key from a file on the RWC computer or from a key management
server.
Use the following process to delete a data encryption license key:
1. Back up the secondary data encryption license key.
For more information about backing up secondary data encryption license keys, see “Workflow
for backing up secondary data encryption license keys” (page 18) .
2. Ensure the key is not allocated to the parity group.
For more information about checking the key allocation, see “Creating data encryption license
keys” (page 17) .
3. Delete the data encryption license key using one of the following methods:
•
Delete the key from a file on the RWC computer.
For more information about deleting keys from the RWC computer, see “Deleting data
encryption license keys” (page 26) .
•
Delete the backup key from the key management server.
For more information about deleting backup keys from a key management server, see
“Deleting backup data encryption license keys from the server” (page 27) .
Deleting data encryption license keys
Delete data encryption license keys from a file on the RWC computer.
You can only delete encryption keys with a Free attribute can be deleted. Encryption keys with the
other attributes cannot be deleted.
1.
In the Administration tree, click Encryption Keys.
2. In the top window, click the Encryption Keys tab.
3. From the Encryption Keys table, select the key ID for the data encryption license key you want
to delete and then complete one of the following:
•
Click Settings > Security > Encryption Keys > Delete Keys.
•
Click More Actions > Delete Keys.
26 Managing data encryption license keys