Open topic with navigation

Enable Encryption

The StorCycle solution supports a single encryption key for all storage targets. The key used for encryption and decryption is saved in memory. If the server reboots, the encryption password must be re-entered. The StorCycle solution automatically regenerates the encryption key.

CAUTION 

Safely store the encryption password in a secure location. If you lose the encryption password, you are not able to use the StorCycle solution to restore the encrypted data after a server reboot. Additionally, any migrate / store jobs to an encrypted target fail.

IMPORTANT 

Once encryption is enabled and the encryption password is set, it cannot be disabled and the password cannot be changed.

IMPORTANT 

StorCycle encryption does not protect the file name and metadata information on the target.

IMPORTANT 

Only users with a Crypto Officer role can enable or disable encryption. See Configure Users for more information about different user types.
Note: Using encryption may have a performance impact on the server CPU.

Use the following instructions to set an encryption password.

1. Click Settings in the toolbar and then select Encryption. The Encryption screen displays.

Figure 100  The Encryption screen.

2.   Click Set Password. The Encryption dialogue box displays.

Figure 101  The Encryption dialog box.

3.   Select either Require encryption key on restart or Save encryption key to local file.
4.   Enter and confirm the Password.
5.   Enter Contact Information for one or more Crypto Officers who can be contacted if the encryption password must be re-entered. You cannot enable encryption without providing contact information for a Crypto Officer.

IMPORTANT 

It is important to have up to date Crypto Officer contact information because migrate / store jobs to encrypted targets or restores from encrypted targets fail until the encryption password is re-entered after a StorCycle server reboot.
6.   Click Submit.
7.   Securely store the encryption password.

CAUTION 

If you lose the encryption password, you are not able to access the data stored by the StorCycle solution after a server reboot.

After enabling encryption and setting the encryption password, you can configure new storage locations to use encryption. See Configuring Storage for more information.