Function SED authentication key Key Management Server Linkage
Key renewal (auto/manual) No Yes
Key compromise (*1) No Yes
Key backup No Yes
Target RAID groups RAID groups (Standard, WSV, SDV), REC Disk Buffers, SDPs, TPPs, FTRPs, and
FTSPs (*2)
*1: The key becomes unavailable in the key server.
*2: The SED key group must be enabled after a pool or REC Disk Buffer is created, or after a pool capacity is
expanded.
An authentication key to access data of the RAID groups that are registered in a key group can be managed by
the key server.
RAID groups that use the same authentication key must be registered in the key group in advance.
Authentication for accessing the RAID groups that are registered in the key group is performed by acquiring the
key automatically from the key server when an
ETERNUS AF is started.
As a key server for the key management server linkage, use a server that has the key management software
"ETERNUS SF KM" installed. IBM Security Key Lifecycle Manager can also be used as the key management soft-
ware.
Figure 40 Key Management Server Linkage
ETERNUS AF
RAID group
Global ho
t spare
Common key
Exclusive
authentication
key for a group
RAID group RAID group
Key group
Key group
Key server
Business server
An ETERNUS AF uses the authentication key
that is stored in the key server in order to
unlock the encryption.
SEDs (RAID group) that are not registered in a key server are encrypted by using the authentication key (com-
mon key) that is stored in the ETERNUS AF.
A hot spare cannot be registered in a key group.
For Global Hot Spares, an authentication key can be specified according to the setting of the key group for the
RAID groups when a Global Hot Spare is configured as a secondary drive for the RAID groups that are registered
in the key group.
For Dedicated Hot Spares, an authentication key can be specified according to the setting of the key group for
the target RAID group when a Dedicated Hot Spare is registered.
1. Function
Data Encryption
69
FUJITSU Storage ETERNUS AF250 S2, ETERNUS AF250 All-Flash Arrays
Design Guide (Basic)
Copyright 2019 FUJITSU LIMITED
P3AG-1822-09ENZ0
To Next Page
Loading...
