So we purchased a Dell SCv3020 with an encryption license and all SED disks. Do we have to have a KMS server to use these? When we had this speced out by consultants no one told us anything about Key management servers, which we do not have. Is there a way to use encryption on the SC without a KMS server?
I am a little bit confused by this statement in the guide you provided
Can I turn on encryption at a later date?
Dell Enterprise Plus SED HDD & SSD’s are always encrypting. By using the Secure Data license and a Key
Management Server you enable the ability for the drives to be unlocked using an Authority Credential.
Without the Secure Data license and the Key Management Server they operate like non-SED drives and
provide no additional benefits.
Are they always encrypting even without a Key management server?
If I set up my SCv3032 without a KMS, then decided I want to set one up, do I have to rebuild my array or is there an easy transition (I already have SED disks and the encryption license, just no KMS yet)
Hello BSH-RESCH, I can tell you with absolute certainty that your disks will not be encrypted until you configure a Key Management Server. Once you add a Key Management Server the disks are then encrypted. Once the disks are encrypted the Key Management Server will not connect unless the SAN reboots and requests the key. Make sure the server is a physical server, and not a virtual machine.
I also have a similar problem, we bought 2.4 TB SED disks, but now when creating TIER it shows errors, but we don't have an encryption license, is it necessary to have this license to use these disks? When purchasing this license, can I use these discs without encryption? We don't need to use encryption.
DELL-Sam L
Community Manager
•
8058 Posts
•
34386 Points
5330
0
Posted June 7th, 2019 09:00
Hello BSH-RESCH,
You don’t have to have KMS to use the drives. The SED drives will go into their own folder and you can create a PagePool. However, you can’t encrypt the drives without having a KMS. Here is the link to using SED drives in a Compellent system. https://downloads.dell.com/solutions/storage-solution-resources/SCSeriesSED-RA-KeySecure(CML1043)v6.pdf
Please let us know if you have any other questions.