The storage system supports the following encryption methods:
- Data at rest encryption
- Protects data stored on volumes.
- Data inflight encryption
- Protects data transmitted between the storage system and mainframe hosts
over Fibre Channel connections.Note: Data inflight encryption is available only when the required encryption license is installed.
Both the encryption methods use a Key Management Server (KMS) and certificates for key management.
The same certificates are used for both encryption methods.