EMC® VNX® Series Security Configuration Guide for VNX

Removing a disk drive from a VNX with encryption enabled

When a system is already configured with DEKs for all the drives in the system that are in RGs or storagepools, those drives are considered bound drives. If a bound drive is removed and after a period of five minutes is not replaced, the DEK for the drive will not be removed from the keystore. The key will remain valid until the RG is deleted, or until a new drive is swapped in. If the removed disk drive is reinserted anywhere in the system before the five minute period has expired, a rebuild will not be required, as in the case of a replacement drive, and modifications will not be made to the keystore. The DEK will remain the same because the key is associated with the disk drive, not the slot. Also, a keystore modified status alert will not be generated. For hot spare replacement information, see Hot spare operations.