Hitachi G1000 Manuel utilisateur

Product Version

Contents

Getting Help

AST

IND

INKS

Hitachi Virtual Storage Platform G1000

Encryption License Key User Guide

MK-92RD8009-04

No part of this publication may be reproduced or transmitted in any form or by any means,

electronic or mechanical, including photocopying and recording, or stored in a database or retrieval

system for any purpose without the express written permission of Hitachi, Ltd.

No part of this publication may be reproduced or transmitted in any form or by any means,

electronic or mechanical, including photocopying and recording, or stored in a database or retrieval

system for any purpose without the express written permission of Hitachi, Ltd.

Hitachi, Ltd., reserves the right to make changes to this document at any time without notice and

assumes no responsibility for its use. This document contains the most current information available

at the time of publication. When new or revised information becomes available, this entire

document will be updated and distributed to all registered users.

Some of the features described in this document might not be currently available. Refer to the most

recent product announcement for information about feature and product availability, or contact

Hitachi Data Systems Corporation at https://portal.hds.com.

Notice: Hitachi, Ltd., products and services can be ordered only under the terms and conditions of

the applicable Hitachi Data Systems Corporation agreements. The use of Hitachi, Ltd., products is

governed by the terms of your agreements with Hitachi Data Systems Corporation.

Notice on Export Controls: The technical data and technology inherent in this Document may be

subject to U.S. export control laws, including the U.S. Export Administration Act and its associated

regulations, and may be subject to export or import regulations in other countries. Reader agrees to

comply strictly with all such regulations and acknowledges that Reader has the responsibility to

obtain licenses to export, re-export, or import the Document and any Compliant Products.

By using this software, you agree that you are responsible for:

a) Acquiring the relevant consents as may be required under local privacy laws or otherwise from

employees and other individuals to access relevant data; and

b) Verifying that data continues to be held, retrieved, deleted, or otherwise processed in accordance

with relevant laws.

Hitachi is a registered trademark of Hitachi, Ltd., in the United States and other countries. Hitachi

Data Systems is a registered trademark and service mark of Hitachi, Ltd., in the United States and

other countries.

Archivas, Essential NAS Platform, HiCommand, Hi-Track, ShadowImage, Tagmaserve, Tagmasoft,

Tagmasolve, Tagmastore, TrueCopy, Universal Star Network, and Universal Storage Platform are

registered trademarks of Hitachi Data Systems Corporation.

AIX, AS/400, DB2, Domino, DS6000, DS8000, Enterprise Storage Server, ESCON, FICON,

FlashCopy, IBM, Lotus, MVS, OS/390, RS/6000, S/390, System z9, System z10, Tivoli, VM/ESA,

z/OS, z9, z10, zSeries, z/VM, and z/VSE are registered trademarks or trademarks of International

Business Machines Corporation.

All other trademarks, service marks, and company names in this document or website are

properties of their respective owners.

Microsoft product screen shots are reprinted with permission from Microsoft Corporation.

Hitachi Virtual Storage Platform G1000 Encryption License Key User Guide

Contents

Preface................................................................................................. vii

Intended audience...................................................................................................viii

Product version....................................................................................................... viii

Document revision level........................................................................................... viii

Changes in this revision............................................................................................viii

Referenced documents.............................................................................................viii

Document conventions.............................................................................................. ix

Accessing product documentation............................................................................... x

Getting help...............................................................................................................x

Comments.................................................................................................................x

1 Encryption License Key Overview........................................................... 1-1

Encryption License Key benefits............................................................................... 1-2

Encryption License Key support specifications........................................................... 1-2

When are data encryption license keys needed......................................................... 1-3

Primary and secondary data encryption license keys..................................................1-3

KMIP key management server support..................................................................... 1-4

Audit logging of encryption events........................................................................... 1-4

Interoperability requirements and considerations...................................................... 1-5

Workflow for enabling data encryption..................................................................... 1-5

Workflow for encrypting existing data...................................................................... 1-5

Workflow for disabling encryption............................................................................ 1-6

Workflow for changing the encryption license key..................................................... 1-6

2 Encryption License Key Installation........................................................ 2-1

Workflow for Encryption License Key installation....................................................... 2-2

System requirements.............................................................................................. 2-2

Enabling the Encryption License Key feature............................................................. 2-2

Disabling the Encryption License Key feature............................................................ 2-3

3 Key Management Server Connections.....................................................3-1

Key management server requirements..................................................................... 3-2

Root and client certificates................................................................................ 3-2

Root certificate on the key management server......................................... 3-2

iii

Hitachi Virtual Storage Platform G1000 Encryption License Key User Guide

Client certificate password....................................................................... 3-2

Workflow for preparing the client certificate....................................................... 3-3

Converting the client certificate to the PKCS#12 format............................. 3-3

Uploading the root and client certificate....................................................3-3

Workflow for edit encryption environmental settings..................................................3-4

Configuring the connection settings to the key management server..................... 3-5

Settings in the Edit Encryption Environmental Settings window............................ 3-6

4 Managing data encryption license keys...................................................4-1

Workflow for creating data encryption license keys....................................................4-2

Creating data encryption license keys.................................................................4-2

Workflow for backing up secondary data encryption license keys......................... 4-3

Backing up keys as a file..........................................................................4-4

Backing up keys to a key management server........................................... 4-4

Opening the Backup Keys to Server window using the Encryption window...4-5

Opening the Backup Keys to Server window using the View Backup Keys on

Server window........................................................................................ 4-6

Editing the password policy..................................................................................... 4-6

Workflow for enabling data encryption on parity groups............................................ 4-7

Enabling data encryption at the parity group-level...............................................4-7

Workflow for disabling data encryption at the parity-group level.................................4-8

Disabling data encryption at the parity-group level..............................................4-9

Encryption formatting at the parity-group level ................................................ 4-10

Workflow for restoring data encryption license keys.................................................4-10

Restoring keys from a file................................................................................4-11

Restoring keys from a key management server................................................. 4-12

Workflow for deleting data encryption license keys..................................................4-12

Deleting data encryption license keys............................................................... 4-13

Deleting backup data encryption license keys from the server............................ 4-14

Viewing encryption keys backed up on the key management server..........................4-15

Exporting encryption license key table information.................................................. 4-15

Rekeying key encryption keys................................................................................ 4-16

Rekeying certificate encryption keys....................................................................... 4-16

Retrying Key Encryption Key Acquisition ................................................................ 4-17

Initialize the connection settings to the key management server.............................. 4-18

5 Troubleshooting....................................................................................5-1

Troubleshooting for Encryption License Key.............................................................. 5-2

Contacting the Hitachi Data Systems Support Center.................................................5-3

A Encryption License Key GUI Reference...................................................A-1

Encryption Keys window..........................................................................................A-3

Edit Encryption Environmental Settings wizard..........................................................A-5

Edit Encryption Environmental Settings window.................................................. A-5

Edit Encryption Environmental Settings confirmation window...............................A-9

Create Keys wizard............................................................................................... A-10

Create Keys window....................................................................................... A-11

Create Keys confirmation window.................................................................... A-11

Edit Password Policy (Backup Encryption Keys) wizard.............................................A-12

Edit Password Policy (Backup Encryption Keys) window.....................................A-12

Hitachi Virtual Storage Platform G1000 Encryption License Key User Guide

Edit Password Policy (Backup Encryption Keys) confirmation window..................A-13

Backup Keys to File wizard.................................................................................... A-14

Backup Keys to File window............................................................................ A-15

Backup Keys to File confirmation window......................................................... A-16

Backup Keys to Server wizard................................................................................ A-16

Backup Keys to Server window........................................................................ A-17

Backup Keys to Server confirmation window.....................................................A-17

Restore Keys from file wizard.................................................................................A-18

Restore Keys from File window........................................................................ A-18

Restore Keys confirmation window...................................................................A-19

Restore Keys from Server wizard............................................................................A-19

Restore Keys from Server window....................................................................A-20

Restore Keys from Server confirmation window................................................ A-20

Delete Keys wizard................................................................................................A-21

Delete Keys window........................................................................................A-21

Delete Keys confirmation window.................................................................... A-22

Delete Backup Keys on Server window................................................................... A-22

View Backup Keys on Server window......................................................................A-23

Edit Encryption wizard...........................................................................................A-24

Edit Encryption window...................................................................................A-25

Edit Encryption confirmation window................................................................A-27

Rekey Certificate Encryption Keys window.............................................................. A-29

Rekey Key Encryption Key window......................................................................... A-29

Retry Key Encryption Key Acquisition window......................................................... A-30

Glossary

Index

Hitachi Virtual Storage Platform G1000 Encryption License Key User Guide

Preface

This document describes and provides instructions for installing and using the

Encryption License Key feature of the Hitachi Virtual Storage Platform G1000

storage system.

Please read this document carefully to understand how to use this product,

and maintain a copy for reference purposes.

□Intended audience

□Product version

□Document revision level

□Changes in this revision

□Referenced documents

□Document conventions

□Accessing product documentation

□Getting help

□Comments

Preface vii

Hitachi Virtual Storage Platform G1000 Encryption License Key User Guide

Intended audience

This document is intended for system administrators, Hitachi Data Systems

representatives, and authorized service providers who install, configure, and

operate the Hitachi Virtual Storage Platform G1000.

Readers of this document should be familiar with the following:

• Data processing and RAID storage systems and their basic functions.

• The Hitachi Virtual Storage Platform G1000 and the Hitachi Virtual

Storage Platform G1000 Product Guide.

• The Hitachi storage management software for the Hitachi Virtual Storage

Platform G1000 (Hitachi Command Suite or Hitachi Device Manager -

Storage Navigator) and the software user manual (Hitachi Virtual Storage

Platform G1000 System Administrator Guide).

• The use of data encryption in a storage environment.

Product version

This document revision applies to Hitachi Virtual Storage Platform G1000

microcode 80-02-4x or later.

Document revision level

Revision Date Description

MK-92RD8009-00 April 2014 Initial release

MK-92RD8009-01 August 2014 Supersedes and replaces MK-92RD8009-00

MK-92RD8009-02 October 2014 Supersedes and replaces MK-92RD8009-01

MK-92RD8009-03 February 2015 Supersedes and replaces MK-92RD8009-02

MK-92RD8009-04 May 2015 Supersedes and replaces MK-92RD8009-03

Changes in this revision

• Revised navigation steps in procedures.

Referenced documents

Hitachi Virtual Storage Platform G1000 documents:

•Hitachi Virtual Storage Platform G1000 Hardware Guide, MK-92RD8007

•Hitachi Virtual Storage Platform G1000 System Administrator Guide,

MK-92RD8016

•Hitachi Virtual Storage Platform G1000 Audit Log User Guide,

MK-92RD8008

viii Preface

Hitachi Virtual Storage Platform G1000 Encryption License Key User Guide

•Hitachi Virtual Storage Platform G1000 Provisioning Guide for Mainframe

Systems, MK-92RD8013

•Hitachi Virtual Storage Platform G1000 Provisioning Guide for Open

Systems, MK-92RD8014

•Hitachi Device Manager - Storage Navigator Messages, MK-90RD8017

•Hitachi Command Suite Messages, MK-90HC178

•Hitachi Command Suite Administrator Guide, MK-90HC175

Document conventions

This document uses the following terminology conventions:

Convention Description

Hitachi storage

management software

Refers to all supported software products for the Hitachi Virtual

Storage Platform G1000 unless otherwise noted:

• Hitachi Command Suite

• Hitachi Device Manager - Storage Navigator

This document uses the following typographic conventions.

Convention Description

Bold Indicates text on a window, such as menus, menu options,

buttons, text boxes, and labels.

Example: Click OK.

Italic Indicates a variable, which is a placeholder for actual text

provided by the user or system.

Example: copy source-file target-file

Note: Angled brackets (< >) also indicate variables.

screen/code Indicates text that is displayed on screen or typed by the user.

Example: # pairdisplay -g oradb

< > angled brackets Indicates a variable, which is a placeholder for actual text

provided by the user or system.

Example: # pairdisplay -g <group>

Note: Italic font also indicates variables.

[ ] square brackets Indicates optional values.

Example: [ a | b ] means that you can choose a, b, or nothing.

{ } braces Indicates required values.

Example: { a | b } means that you must choose either a or b.

| vertical bar Indicates that you have a choice between two or more options

or arguments.

Example:[ a | b ] means that you can choose a, b, or nothing.

Underline Indicates the default value.

Example: [ a | b ]

Preface ix

Hitachi Virtual Storage Platform G1000 Encryption License Key User Guide

This document uses the following icons to draw attention to information.

Icon Meaning Description

Tip Provides helpful information, guidelines, or suggestions for

performing tasks more effectively.

Note Calls attention to important and/or additional information.

Caution Warns the user of adverse conditions and/or consequences

(e.g., disruptive operations).

WARNING Warns the user of severe conditions and/or consequences

(e.g., destructive operations).

Accessing product documentation

The Hitachi Virtual Storage Platform G1000 user documentation is available

on the Hitachi Data Systems Portal: https://portal.hds.com. Check this

site for the most current documentation, including important updates that

may have been made after the release of the product.

Getting help

The Hitachi Data Systems customer support staff is available 24 hours a day,

seven days a week. If you need technical support, log on to the Hitachi Data

Systems Portal for contact information: https://portal.hds.com.

Comments

Please send us your comments on this document: [email protected].

Include the document title and number, including the revision level (for

example, -05), and refer to specific sections and paragraphs whenever

possible. All comments become the property of Hitachi Data Systems

Corporation.

Thank you!

xPreface

Hitachi Virtual Storage Platform G1000 Encryption License Key User Guide

Autres manuels pour G1000

Table des matières

Autres manuels Hitachi Stockage

Hitachi

Hitachi RPI-8.0FSN3E Manuel utilisateur

Hitachi

Hitachi Travelstar 5K100 Manuel utilisateur

Hitachi

Hitachi Travelstar Manuel utilisateur

Hitachi

Hitachi DKC910I Manuel utilisateur

Hitachi

Hitachi Ultrastar 15K73 Manuel utilisateur

Hitachi

Hitachi Virtual Storage Platform F800 Manuel d'utilisation et d'entretien

Hitachi

Hitachi ULTRASTAR 15K450 HUS154530VLF400 Manuel utilisateur

Hitachi

Hitachi Travelstar 5K1000 Manuel utilisateur

Hitachi

Hitachi DK23EA - Travelstar Series 30 GB Hard Drive Manuel utilisateur

Hitachi

Hitachi VSP Gx00 series Manuel de service

Hitachi

Hitachi VSP E990 Manuel utilisateur

Hitachi

Hitachi Deskstar 7K80 Manuel utilisateur

Hitachi

Hitachi DK32EJ-NC Manuel utilisateur

Hitachi

Hitachi Universal Storage Platform V Manuel utilisateur

Hitachi

Hitachi Freedom Storage Lightning 9900 V series Manuel utilisateur

Hitachi

Hitachi Travelstar XP Manuel utilisateur

Hitachi

Hitachi HTS541010G9AT00 - Travelstar 100 GB Hard... Manuel utilisateur

Hitachi

Hitachi 3.5-inch Deskstar HDS722020ALA330 Manuel utilisateur

Hitachi

Hitachi Virtual Storage Platform G200 Manuel utilisateur

Hitachi

Hitachi Virtual Storage Platform G800 Manuel utilisateur

Hitachi

Hitachi Virtual Storage Platform G350 Mode d'emploi

Hitachi

Hitachi E1090 Manuel utilisateur

Hitachi

Hitachi Virtual Storage Platform G400 Manuel utilisateur

Hitachi

Hitachi Travelstar C3K80 Manuel utilisateur

Manuels Stockage populaires d'autres marques

QNAP

QNAP TS 32PXU Series Manuel utilisateur

LaCie

LaCie RUGGED RAID Manuel utilisateur

Freecom

Freecom CLS DOCK Manuel utilisateur

PNY

PNY Attache P-FD64MBATT3 Manuel utilisateur

HP StorageWorks MSL2024 Manuel utilisateur

OLT

OLT 6x6 Maximizer Manuel utilisateur

Transcend

Transcend JetFlash 160 Manuel utilisateur

LaCie

LaCie RUGGED MINI Manuel utilisateur

Thunderbolt

Thunderbolt 600 Manuel utilisateur

Panasonic

Panasonic LB-DH8 series Manuel

Intel

Intel RAID High Availability Manuel utilisateur

LaCie

LaCie 12big Thunderbolt 3 Manuel utilisateur

Spectra Logic

Spectra Logic T-Series Spectra T50e Manuel utilisateur

Panasonic

Panasonic LKM-F931-1 Manuel utilisateur

Tabernus

Tabernus Enterprise Erase E2400 Manuel utilisateur

Rocstor

Rocstor COMMANDER 3F series Manuel utilisateur

HP P9000 Manuel utilisateur

Western Digital

Western Digital Ultrastar Data60 Manuel utilisateur