eNAS management interface
eNAS block and file storage is managed using the Unisphere for VMAX File Dashboard.
Link and launch enables you to run the block and file management GUI within the same
session.
The configuration wizard helps you create storage groups (automatically provisioned
to the Data Movers) quickly and easily. Creating a storage group creates a storage
pool in Unisphere for VNX that can be used for file level provisioning tasks.
Data protection and integrity
HYPERMAX OS provides a suite of integrity checks, RAID options, and vaulting
capabilities to ensure data integrity and to protect data in the event of a system failure
or power outage.
Data at Rest Encryption
Securing sensitive data is one of the greatest challenges faced by many enterprises.
Increasing regulatory and legislative demands and the constantly changing threat
landscape have brought data security to the forefront of IT issues. Several of the most
important data security threats are related to protection of the storage environment.
Drive loss and theft are primary risk factors. EMC
®
Data at Rest Encryption (D@RE)
protects data confidentiality by adding back-end encryption to the entire array.
D@RE provides hardware-based, on-array, back-end encryption for VMAX arrays by
using SAS I/O modules that incorporate AES-XTS inline data encryption. These
modules encrypt and decrypt data as it is being written to or read from disk, thus
protecting your information from unauthorized access even when disk drives are
removed from the array.
D@RE supports either an internal embedded key manager, or an external, enterprise-
grade key manager accessible through Key Management Interoperability Protocol
(KMIP). The following external key managers are supported:
l
SafeNet KeySecure by Gemalto
l
IBM Security Key Lifecycle Manager
Note
For supported external key manager and HYPERMAX OS versions, refer to the EMC
E-Lab Interoperability Matrix (
https://www.emc.com/products/interoperability/
When D@RE is enabled, all configured drives are encrypted, including data drives,
spares, and drives with no provisioned volumes. Vault data is encrypted on Flash I/O
modules.
D@RE enables:
l
Secure replacement for failed drives that cannot be erased.
For some types of drive failures, data erasure is not possible. Without D@RE, if
the failed drive is repaired, data on the drive may be at risk. With D@RE, simply
delete the applicable keys, and the data on the failed drive is unreadable.
l
Protection against stolen drives.
When a drive is removed from the array, the key stays behind, making data on the
drive unreadable.
l
Faster drive sparing.
VMAX3 with HYPERMAX OS
Data protection and integrity
39
Summary of Contents for VMAX 100K
Page 1: ...EMC VMAX3 Family Product Guide VMAX 100K VMAX 200K VMAX 400K with HYPERMAX OS REVISION 6 5 ...
Page 20: ...Preface 20 Product Guide VMAX 100K VMAX 200K VMAX 400K with HYPERMAX OS ...
Page 46: ...VMAX3 with HYPERMAX OS 46 Product Guide VMAX 100K VMAX 200K VMAX 400K with HYPERMAX OS ...
Page 72: ...Open systems features 72 Product Guide VMAX 100K VMAX 200K VMAX 400K with HYPERMAX OS ...
Page 82: ...Provisioning 82 Product Guide VMAX 100K VMAX 200K VMAX 400K with HYPERMAX OS ...
Page 158: ...Remote replication solutions 158 Product Guide VMAX 100K VMAX 200K VMAX 400K with HYPERMAX OS ...
Page 186: ...Mainframe Error Reporting 186 Product Guide VMAX 100K VMAX 200K VMAX 400K with HYPERMAX OS ...
Page 200: ...Licensing 200 Product Guide VMAX 100K VMAX 200K VMAX 400K with HYPERMAX OS ...