Unsolved
This post is more than 5 years old
12 Posts
1
4511
how to implementation with XtremIO encryption
Hi
I Have a new xtremIO with encryption feature, I have 2 question, kindly help me:
1. when I assign 1 LUN (A) for 1 server. All data in this LUN is encryption. What happen when my server is down, I changed new server. and assign this LUN (A) again? How to configuration for new server can read old data in LUN (A)?
2. How to manager key for encryption in XtremIO ?
huj1
15 Posts
3
November 28th, 2016 19:00
1. XtremIO encryption is on SSD level, this is used to protected customer's data if the SSD was moved from XtremIO to other places.So if your server is down, once you mapped the LUN to new server, the new server could access the data directly.
2. The encryption key is built in XtremIO and no need to manage it.
vietdh
12 Posts
0
November 28th, 2016 20:00
Thanks for your support
Anonymous
5 Practitioner
5 Practitioner
•
274.2K Posts
2
December 2nd, 2016 09:00
Expounding on this a little further, the SSDs in the DAE are Self-Encrypting (SEDs), meaning that all data stored on the XtremIO array is automatically encrypted using hardware-based encryption whether encryption is enabled or not. The primary difference between enabling/disabling encryption on the array is where the key is stored. When encryption is enabled a new key is generated for all XtremIO Data Protection Groups and stored on the array Storage Controllers(SC) separate from the DPGs/DAEs. Without encryption enabled, the SSDs store the encryption keys locally, which is much less secure. It's important to note that this solution does not eliminate the need for host-level encryption in highly secure environments, as this level of encryption is not LUN/Volume based, and does not meet certain regulatory requirements.
vietdh
12 Posts
0
December 2nd, 2016 15:00
Thanks for your answer