Fujitsu ETERNUS DX8100 S3 - Page 55

Chapter 2 System Status
2.4 Key Management
ETERNUS Web GUI User’s Guide (Operation)
Copyright 2016 FUJITSU LIMITED P2X0-1260-19ENZ0
55
- High
Rebuilding to hot spares for which the key cannot be changed after SED failure is not performed. The
RAID group loses its redundancy (" Exposed", " Partially Exposed" (only for High Reliability
(RAID6)), " Exposed (Fast)" (only for High Reliability (RAID6-FR)), or "
Partially Exposed (Fast)"
(only for High Reliability (RAID6-FR))).
When SED maintenance is being performed, replacing a SED with a new SED for which the key cannot
be changed does not complete successfully. If this action is performed, the status of the new SED
changes to " Not Exist".
When communication between the key server and the ETERNUS DX/AF returns to normal and the key
can be obtained, the SED status changes to normal. Rebuilding to the SED for which the status changed
to normal is performed after the key is changed. Note that "Modifying" may be displayed for the key
status for few minutes even though the SED key has already changed. After changing the key,
maintenance of the SEDs is complete.
- Low
Rebuilding or maintenance is performed by using the common key if changing of the key in the key
server fails due to a network error.
Even if the security level is changed from "High" to "Low", the rebuilding process does not start
immediately after the level is changed. Rebuilding processes start after the ETERNUS DX/AF recognizes
that changing of the security level and the key is complete.
• Recovery Mode
The recovery mode for the key group is displayed. If no key groups are created, the field is blank.
The recovery mode is a method to recover locked (*1) RAID groups or SEDs after communication with the
key server is resolved. For RAID groups in locked status, " SED Locked" is displayed. For SEDs in locked
status, " Not Exist" is displayed.
*1: A blocked status that occurs when the key of the RAID groups cannot be obtained.
- Automatic
This mode recovers locked RAID groups or SEDs when the communication error with the key server is
resolved.
- Manual
Use the [Recovery SED] function of ETERNUS Web GUI to recover the locked RAID groups or SEDs when
the communication error with the key server is resolved.
• Key Expiration Date
The key expiration date is displayed. If no key groups are created, the field is blank.
When the key has expired, a new key is obtained from the key server and automatically applied in place of
the expired key.
Note that the display contents for this item changes as follows:
- When the key status is "Modifying", the expiration date before the key was replaced is displayed.
- When the key status is "Unregistered Server Certificate", "No SSL Certificate", "Network Error", "Not
Acquired", or "Key Server Error", a "-" (hyphen) is displayed.
• YYYY-MM-DD (YYYY: Year (AD), MM: Month (01 - 12), DD: Date (01 - 31))