Oracle ZFS Storage Appliance User Manual

Data Encryption
LICENSE NOTICE: Encryption may be evaluated free of charge, but the feature requires
that an independent license be purchased separately for use in production. Encryption is only
available to license on the Oracle ZFS Storage ZS5-4, Oracle ZFS Storage ZS5-2, Oracle ZFS
Storage ZS4-4, and Oracle ZFS Storage ZS3-4. After the evaluation period, this feature must
either be licensed or deactivated. Oracle reserves the right to audit for licensing compliance at
any time. For details, refer to the "Oracle Software License Agreement ("SLA") and Entitlement
for Hardware Systems with Integrated Software Options."
The Oracle ZFS Storage Appliance offers transparent data encryption for individual shares
(filesystems and LUNs), and shares created inside of projects.
To configure and manage encryption, use these tasks:
■
“Data Encryption Workflow” on page 560
■
Configuring LOCAL Keystore Encryption - BUI, CLI
■
Configuring OKM Keystore Encryption - BUI, CLI
■
Creating an Encrypted Project - BUI, CLI
■
Changing a Project Encryption Key - BUI, CLI
■
Creating an Encrypted Filesystem or LUN - BUI, CLI
■
Changing a Share Encryption Key - BUI, CLI
■
Backing up a LOCAL Key - BUI, CLI
■
Deleting an Encryption Key - BUI, CLI
■
Restoring a LOCAL Key - BUI, CLI
■
Cloning a Snapshot - BUI, CLI
To understand data encryption, use these topics:
■
“Encryption Properties” on page 581
■
“Managing Encryption Keys” on page 582
■
“Performance Impact of Encryption” on page 584
■
“Encryption Key Life Cycle” on page 585
■
“Backing up and Restoring Encrypted Data” on page 585
■
“Replicating an Encrypted Share” on page 586
Data Encryption 559

Oracle ZFS Storage Appliance Specifications

General

Connectivity	10GbE, 40GbE, InfiniBand, Fibre Channel
Protocols	NFS, SMB, iSCSI, Fibre Channel, HTTP
Operating System	Oracle Solaris
Data Protection	snapshots, clones, remote replication
Data Reduction	Inline compression, deduplication
High Availability	Redundant hardware components (controllers, power supplies, fans). Automatic failover between controllers. Hot-swappable drives and components. Cluster configurations for increased availability and scalability.
Management Interface	Web-based GUI, CLI, REST API
Storage Type	Hybrid (SSD + HDD), All-Flash
Storage Capacity	Up to several petabytes
Encryption	AES-256 encryption at rest