To Next Page

To Previous Page

Chapter 13. Encryption

Encryption protects against the potential exposure of sensitive user data that is stored on

discarded, lost, or stolen storage devices. IBM Storwize V5020, IBM Storwize V5030F and

IBM Storwize V5030 support optional encryption of data at-rest. IBM Storwize V5010 does

not support encryption.

Specifically, this chapter provides information about the following topics:

򐂰 Planning for encryption

򐂰 Defining encryption of data at-rest

򐂰 Activating encryption

򐂰 Enabling encryption

򐂰 Configuring additional providers

򐂰 Migrating between providers

򐂰 Recovering from a provider loss

򐂰 Using encryption

򐂰 Rekeying an encryption-enabled system

򐂰 Migrating between providers

򐂰 Disabling encryption

Default Chapter5
- Table of Contents5
Notices15
- Trademarks16
- Authors17
Preface17
- Comments Welcome19
- Now You Can Become a Published Author, too19
- Stay Connected to IBM Redbooks19
Summary of Changes21
Chapter 1. Overview of the IBM Storwize V5000 Gen2 System23
- IBM Storwize V5000 Gen2 Overview24
- IBM Storwize V5000 Gen2 Terminology26
- IBM Storwize V5000 Gen2 Models28
  - IBM Storage Utility Offerings32
- IBM Storwize V5000 Gen1 and Gen2 Compatibility33
- IBM Storwize V5000 Gen2 Hardware34
- IBM Storwize V5000 Gen2 Terms41
- IBM Storwize V5000 Gen2 Features49
- Problem Management and Support55
- More Information Resources56
  - Useful IBM Storwize V5000 Gen2 Websites56
Chapter 2. Initial Configuration57
- Hardware Installation Planning58
  - Procedure to Install the SAS Cables59
- SAN Configuration Planning62
- FC Direct-Attach Planning64
- SAS Direct-Attach Planning66
- LAN Configuration Planning67
  - Management IP Address Considerations68
  - Service IP Address Considerations68
- Host Configuration Planning69
- Miscellaneous Configuration Planning70
- System Management71
  - Graphical User Interface (GUI)71
  - Command-Line Interface (CLI)72
- First-Time Setup73
- Initial Configuration77
  - Adding Enclosures after the Initial Configuration90
  - Service Assistant Tool96
Chapter 3. Graphical User Interface Overview99
- Overview of IBM Spectrum Virtualize Management Software100
- Overview Pane108
- Monitoring Menu108
- Pools Menu117
- Volumes Menu130
- Hosts Menu135
- Copy Services141
- Access Menu149
  - Users150
  - Audit Log Option151
- Settings Menu153
Chapter 4. Storage Pools165
- Working with Internal Drives166
  - Internal Storage Window166
  - Actions on Internal Drives169
- Working with Storage Pools178
- Working with Managed Disks193
- Working with External Storage Controllers220
Chapter 5. Host Configuration221
- Host Attachment Overview222
- Planning for Direct-Attached Hosts223
  - Fibre Channel Direct Attachment to Host Systems223
  - FC Direct Attachment between Nodes in a Storwize V5000 System223
- Preparing the Host Operating System223
- Creating Hosts by Using the GUI258
- Host Clusters281
- Proactive Host Failover307
Chapter 6. Volume Configuration309
- Introduction to Volumes310
- Create Volumes Menu321
- Creating Volumes Using the Volume Creation325
  - Creating Basic Volumes Using Volume Creation325
  - Creating Mirrored Volumes Using Volume Creation328
- Mapping a Volume to the Host331
- Creating Custom Volumes335
- Hyperswap and the Mkvolume Command344
  - Volume Manipulation Commands347
- Mapping Volumes to Host after Volume Creation349
  - Mapping Newly Created Volumes to the Host Using the Wizard349
- Migrating a Volume to Another Storage Pool355
- Migrating Volumes Using the Volume Copy Feature359
- I/O Throttling365
  - Define Throttle on a Volume366
  - Remove a Throttle from a Volume368
Chapter 7. Storage Migration371
- Storage Migration Wizard Overview372
- Interoperation and Compatibility372
- Storage Migration Wizard373
Chapter 8. Advanced Host and Volume Administration397
- Advanced Host Administration398
- Adding and Deleting Host Ports417
  - Adding Host Port418
  - Deleting a Host Port424
- Advanced Volume Administration427
- Volume Properties and Volume Copy Properties444
- Advanced Volume Copy Functions447
- Volumes by Host456
Chapter 9. Advanced Features for Storage Efficiency459
- Introduction460
- Easy Tier461
- Thin Provisioning488
- Real-Time Compression Software494
Chapter 10. Copy Services507
- IBM Flashcopy508
- Flashcopy Functional Overview513
- Implementing Flashcopy514
- Managing Flashcopy by Using the GUI536
- Volume Mirroring and Migration Options570
- Native IP Replication571
- Remote Copy580
- Consistency Protection for Remote and Global Mirror607
- Remote Copy Commands608
- Managing Remote Copy Using the GUI616
- Troubleshooting Remote Copy647
  - 1920 Error647
- Hyperswap650
Chapter 11. External Storage Virtualization663
- Planning for External Storage Virtualization664
- Working with External Storage667
Chapter 12. RAS, Monitoring, and Troubleshooting683
- Reliability, Availability, and Serviceability Features684
- System Components685
- Configuration Backup704
  - Generating a Manual Configuration Backup by Using the CLI704
  - Downloading a Configuration Backup by Using the GUI705
- System Update709
  - Updating Node Canister Software709
  - Updating the Drive Firmware723
- Monitoring725
  - Email Notifications and Call Home726
- Audit Log729
- Event Log731
  - Managing the Event Log731
  - Alert Handling and Recommended Actions735
- Support Assistance738
- Collecting Support Information748
- Powering off the System and Shutting down the Infrastructure759
  - Powering off759
  - Shutting down and Starting up the Infrastructure763
Chapter 13. Encryption765
- Planning for Encryption766
- Defining Encryption of Data At-Rest766
- Activating Encryption771
- Enabling Encryption780
- Configuring Additional Providers802
  - Adding SKLM as a Second Provider802
  - Adding USB Flash Drives as a Second Provider804
- Migrating between Providers806
  - Migration from USB Flash Drive Provider to Encryption Key Server806
  - Migration from Encryption Key Server to USB Flash Drive Provider807
- Recovering from a Provider Loss807
- Using Encryption807
- Rekeying an Encryption-Enabled System815
  - Rekeying Using a Key Server816
  - Rekeying Using USB Flash Drives818
- Migrating between Key Providers820
- Disabling Encryption821
Appendix A. CLI Setup and SAN Boot823
- Command-Line Interface824
  - Basic Setup824
- SAN Boot836
Appendix B. Terminology841
- Commonly Encountered Terms842
Related Publications859
- IBM Redbooks859
- IBM Storwize V5000 Publications and Support859
- Help from IBM859

IBM Storwize V5030 User Manual

Table of Contents

Other manuals for IBM Storwize V5030

Questions and Answers:

IBM Storwize V5030 Specifications

Related product manuals

Brand	IBM
Model	Storwize V5030
Category	Storage
Language	English