Chapter 7 System Environment Settings; Required Settings For The Key Management Function - Fujitsu ETERNUS DX100 S3 Setup Manual

Chapter 7
System Environment Settings
This chapter describes the key management settings that are used for encrypting authentication of SEDs.
7.1

Required Settings for the Key Management Function

Security on preventing the leakage of information can be improved by storing the key for Self Encrypting Drive
(SED) authentication in an external secure place (key server), and updating the key regularly.
The ETERNUS DX200F does not support the key management functions.
7.1.1 Required Settings for the Key Management Function
This section describes preparation that needs to be performed before using the key management function,
how to check the key status, and how to perform key group settings for RAID groups.
Perform the required settings in the following order.
7.1.1.1 Preparation
(1) Register SED authentication key
Register the key (common key) that is managed in the ETERNUS DX S3 series.
Refer to "Register SED Authentication Key" in "ETERNUS Web GUI User's Guide (Settings)" for details.
• If an SED is installed without registering the common key, rebooting the ETERNUS DX S3 series is
required after registering the key.
• The common key setting cannot be changed or deleted.
• The "Register SED Authentication Key" function can only be used once. If an SED authentication key is
already registered in the "Register SED Authentication Key" screen of the initial setup, this operation is
not required. Use the [System Settings] screen to check whether the SED authentication key is already
registered. Refer to "System Settings" in "ETERNUS Web GUI User's Guide (Operation)" for details.
If the common key is used to manage all of the SEDs in the ETERNUS DX S3 series, the required settings for
key management are complete.
To manage the key in the key server, perform the following procedures
certificate" (page 108)
RAID groups that use the common key and RAID groups that use the key in the key server (RAID groups
that are registered in the key group) can be used in the same storage system.
onward).
107
FUJITSU Storage ETERNUS DX Configuration Guide (Web GUI)
Copyright 2014 FUJITSU LIMITED
("(2) Create self-signed SSL
P2X0-1250-06ENZ0