IBM System Storage DS8700 Disk Encryption Implementation and Usage Guidelines

IBM® recognizes the requirement for data protection, not only from hardware or software failures, but also from physical relocation of hardware, theft, and re-tasking of existing hardware.

The IBM DS8000® Series offers encrypted Fibre Channel drives. These Full Disk Encryption drive sets are used with key management services provided by IBM Tivoli® Key Lifecycle Manager software to allow encryption for data at rest on a DS8000 Storage System.

Use of encryption technology has a number of considerations that are critical for you to understand in order to maintain the security and accessibility of encrypted data.

This IBM Redpaper™ publication contains information that can help customers and storage administrators plan for disk encryption. It also explains how to install and manage the encrypted storage.

More importantly, this paper documents how to comply with IBM requirements for using the IBM DS8000 encrypted storage. This edition applies specifically to the IBM System Storage™ DS8700 with DS8000 Licensed Machine Code (LMC) 5.5.0.xx (bundle version 75.0.xx.xx).

• IBM System Storage DS8700: Architecture and Implementation, SG24-8786-00
• Implementing the IBM System Storage SAN Volume Controller V4.3, SG24-6423-06

Publish Date
16 December 2009

Rating:
(based on 1 review)

Rate this paper

Author(s)

Bertrand Dufrasne is an IBM Certified Consulting IT Specialist and Project Leader for IBM System Storage disk products at the International Technical Support Organization, San Jose Center. He has worked at IBM in various IT areas. Bertrand has written many IBM Redbooks publications and has also developed and taught technical workshops. Before joining the ITSO, he worked for IBM Global Services as an Application Architect in the retail, banking, telecommunication, and healthcare industries. He holds a Master's degree in Electrical Engineering from the Polytechnic Faculty of Mons (Belgium).

• Bertrand Dufrasne

Steven Joseph is a Staff Software Engineer for the PE Tools Team in Tucson, Arizona. He has been with IBM for five years as a Product Field Engineer for Systems Storage products, including ESS and DS8000. He develops RAS microcode for the DS8000 and DS8700, as well as remote support and data analysis tools for Global Product Engineering and Systems Test teams. He is a Certified Java Developer and has been developing AIX software for over 10 years. He also holds multiple vendor certifications from HP, Cisco, and Sun. Steven's current assignment is on the ARK project for real-time diagnostics on IBM Systems Storage products.

• Steven Joseph

Robert Tondini is a Consulting IT Specialist based in IBM Australia, providing storage technical support. He has 14 years of experience in the IBM S/390 and storage environment. His areas of expertise include IBM high-end disk, tape storage subsystems and design and implementation of storage management and disaster recovery solutions. He co-authored several IBM Redbooks publications for IBM enterprise storage systems and Tivoli storage software.

• Robert Tondini

Jens Wissenbach is an active member of the IBM ESCC (European Storage Competence Center) in Mainz, Germany since 1999. He started with IBM in 1984 and completed a number of assignments in memory test, 390 DataCenter Operation and HDD testing development. Today he works as Solution Architect for STG Lab Services and is mainly responsible for asset-driven services with the DS8000 and TPC. He also acts as customer liaison at DS8000 User Group Meetings, and reports the information to development teams within IBM.

• Jens Wissenbach

Roland Wolf is a Certified IT Specialist in Germany. He has worked for IBM for 23 years and has 15 years of experience with high-end disk-storage hardware in S/390 and Open Systems environments. He works in Field Technical Sales Support for storage systems. His areas of expertise include performance analysis and disaster recovery solutions in enterprises using the unique capabilities and features of the IBM disk storage servers, DS8000, and IBM XIV. He has contributed to various IBM Redbooks publications including, ESS, DS80000 Architecture, and DS8000 Copy Services. He holds a Ph.D. in Theoretical Physics.

• Roland Wolf

IBM Form Number
REDP-4500-01

Number of pages

170