Encryption CLI Commands
Data-at-Rest Encryption uses Self Encrypting Drive (SED) technology to secure all data stored on DXi systems, including:
- File data and metadata
- Configuration files
- DXi and operating system software
When Data-at-Rest Encryption is enabled, all hard drives in the DXi are paired with the disk controllers through encryption keys. After this pairing, accessing data on the drives requires the same encryption keys and controllers that were used to write the data. This access method ensures that a drive physically removed from the DXi cannot be read using another system or device.
System Requirements
To enable Data-at-Rest Encryption, you must ensure that the following requirements are met.
Hardware Requirements
- All drive controllers and hard drives (active and hot spares) in the DXi support SED technology.
- All physical drives are Self Encrypting.
Software Requirement
- A DXi hard drive security license is intalled.
Caution: After you enable Data-at-Rest Encryption, you cannot disable it or turn it off. Make sure to back up your passphrase and security files, as they may be required for future capacity expansion or rare hardware failure scenarios.
See the following topic for Encryption CLI commands: Manage Encryption
