Lun Encryption on VNX

Hi,

what you want is VNX host encryption – aka. PowerPath encryption

http://powerlink.emc.com/km/live1/en_US/Offering_Basics/Offering_Collateral/h8572-ds-vnx-host-encrypition.pdf

It is indeed included in the Security and Compliance suite.

Thank you Rainer - Should I have received an Enabler file or is there another way to install Powerpath? Also, do I require the RSA product or can I use another key management solution?

there is no native encryption functionality in VNX, you will need to use PowerPath encryption with RSA key managers. I am not sure what sku EMC uses to bundle this solution.

No enabler needed – it is just host (client) software

The difference between PowerPath encryption and VNX host encryption is mainly licensing. PPE is per host where as the VNX host encryption purchased through the suite covers any number of hosts attached to the array.

Yes you need RSA for key management.

You local EMC or partner technical contact who sold you the system should be able to help you with licensing.

Rainer

PowerPath Encryption will require a special license key that you install on the host.

Hi RRR

What is it in that Presentation that makes you assume that Self encrypting drives will be available for the VNX...

Just the fact that they are available for the VNXe does not guarantee that they are coming for the VNX.

The 2 systems runs on different code and cannot be compared.

It would be something like seeing a feature on VMAX and saying hey that will be available on VNX very soon....

It may happen but I cannot see where your info is coming from...

Hey guys, last year we had a customer update where EMC anounced a few new things for the VNX:

Q4’12 Release

• Self-encrypting drives:
  • 900GB SAS
  • 3TB NL-SAS
• 4TB NL-SAS (base support)

This was presented to us by EMC and this is regarding the VNXe, but you can assume it always goes for the regular VNX models.

I simply googled for it and when I saw the presentation I remembered them saying it:

https://www.google.nl/#hl=nl&sclient=psy-ab&q=self+encrypting+drive+emc&oq=self+encrypting+drive+emc&gs_l=hp.3..0i30.1035.10848.0.10958.25.16.8.1.2.1.344.1412.13j2j0j1.16.0...1.0...1c.1.4.psy-ab._K-btqL5ess&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&bvm=bv.42768644,d.d2k&fp=2d876d7b44067030&biw=1664&bih=791

self encrypting drives are not available for VNX ..(at least not yet)

Ok, but reading this EMC presentation I can safely assume they will be soon. I’d keep an eye out for this. Maybe more @EMCWorld ?

Take a look here: http://netherlands.emc.com/campaign/netherlands/presentations/1-jeroen-kleinnibbelink-unified-storage.pdf

Dont assume – talk to your EMC contact about roadmap details

I never said it will be, but that I assumed it. At least EMC is working on it. VMAX also has “encryption in rest” I think it’s called, so the low end and the high end already have it, so my assumption just might be true

How dare you to contemplate and being logical !?!  :d

I know, I know, but I was just trying to point out that VNXe has it and that’s a VNX as well, isn’t it?

Don’t shoot me, please :P

if they need array level encryption they will need to purchase VNX2 with DataEncryption enabler.