Quantum DXi6900

Chapter 9: Configuration
System
Quantum DXi6900 User’s Guide 343
drives in the DXi6900 are securely encrypted and cannot be read if removed from the system.
Click CheckStatus to view detailed information about the status of Data-at-Rest Encryption and to see if
the DXi6900 supports all requirements for enabling the feature.
When Data-at-Rest Encryption is enabled, all hard drives in the DXi6900 are paired to their respective RAID
controllers using encryption keys. These keys are generated using a passphrase that you supply.
Note:Before you can enable Data-at-Rest Encryption, you must install the required license (see
Licensing Data-at-Rest Encryption and Obtaining Premium Feature Keys on page 370). You must also
upload a Premium Feature Key (PFK) file for each Array module in the DXi6900 (see Security on page
318).
Caution:Make sure you are certain you want to enable Data-at-Rest Encryption before proceeding.
After you enable Data-at-Rest Encryption, you cannot disable it or turn it off.
To enable Data-at-Rest Encryption:
1. Verify that the system is in an optimal state:
l All hardware statuses on the system are Normal (see Hardware on page 170).
Caution:All storage arrays must show Normal condition (see Details on page 171). If any
storage arrays are degraded, do not enable Data-at-Rest Encryption.
l All outstanding administration alerts are deleted (see Admin Alerts on page 196).
l All service tickets are closed (see Service Tickets on page 197).
2. Under EnableData-at-RestEncryption, type a security passphrase in the Passphrase box.
Caution:If you are re-enabling Data-at-Rest Encryption, you must enter the same passphrase
that was used when encryption was originally enabled.
The passphrase must meet all of the following requirements:
l Must be 8–32 characters long.
l Must contain at least 1 digit [0–9].
l Must contain at least 1 uppercase letter [A–Z].
l Must contain at least 1 lowercase letter [a–z].
l Must contain at least 1 non-alphanumerical character, for example, ‘+’ or ‘@’.
Note:An underscore [ _ ] is considered an alphanumeric character.
l Must not contain a space, tab, single quote [‘], double quote [“], or dollar sign [$].
3. Enter the passphrase again in the ConfirmPassphrase box.
4. Click Enable.