Encryption key operations

System Administrator Guide for VSP One Block 85
Version
A0-05-4x
Audience
anonymous
Part Number
MK-26VSP1B030-03
ft:lastEdition
2026-06-22

Encryption operations

The following table lists the operations related to the encryption functions and shows the GUI operations that correspond to each encryption operation. The items are listed in alphabetical order.

Function name

Operation name

Corresponding GUI operations

ENC

Backup Keys

Backing up encryption keys to the key management server or management PC

Backup Keys to File

Backing up encryption keys as a file on the management PC

Delete and Create Keys
  • Deleting unused encryption keys
  • Creating unused encryption keys

Delete Key Mng Serv Cert

Deleting the key management server certificate file

Edit ENC Settings

Configuring encryption environment settings

Rekey CEK
  • Configuring encryption environment settings
  • Rekeying certificate encryption keys

Rekey KEK

Rekeying a key encryption key

Restore Keys

Restoring encryption keys from a backup on the key management server or management PC

Restore Keys fr File

Restoring encryption keys from backup copies on the management PC

Restore Keys fr File(Forcibly)

Restoring encryption keys forcibly from backup copies on the management PC

Set Up Key Mng Serv

Configuring an encryption environment

Set Up Key Mng Serv Cert

Registering the key management server certificate file

Encryption events

The following table lists the events related to the encryption functions and shows the output triggers for each event. The items are listed in alphabetical order.

Function name

Event name

Output triggers

ENC

Add Attr to KEK Dynamic on Serv

When the key management server is changed

Add KEK Dynamic to Serv

When the key management server is changed

Add Key Mng Serv Cert

When a key management server certificate is registered

Backup Keys

When an encryption key is backed up.

Backup Keys to Serv

When encryption keys are backed up to the key management server

Backup Keys to Serv(Auto)

When encryption keys are automatically backed up to the key management server
Change CEK Status
  • When the encryption environment is configured from the initial setting
  • When the encryption environment is initialized
  • When the certificate encryption key is rekeyed
  • When an encryption module (ENCM) is added, removed, or replaced

Change DEK Status

  • When the encryption environment is configured from the initial setting
  • When the encryption environment is initialized
  • When data encryption is enabled or disabled
  • When dynamic sparing, correction copy, or copy back is performed
  • When a drive is added, deleted, or replaced after the encryption environment is configured

Clear Keys

When the encryption environment is initialized

Create KEK Def
  • When the encryption environment is configured
  • When a key encryption key is rekeyed

Create KEK Dynamic
  • When the encryption environment is configured
  • When a key encryption key is rekeyed

Create Keys

When an encryption key is created

Create Keys on DKC

When an encryption key is created on DKC

Create Keys On Serv
  • When an encryption key is generated
  • When encryption keys are backed up to the key management server
  • When the encryption environment is configured
Delete CEK When the encryption environment is initialized

Delete DEK

When an encryption key is deleted

Delete KEK Def
  • When the encryption environment is configured
  • When a key encryption key is rekeyed

Delete KEK Dynamic
  • When the encryption environment is configured
  • When a key encryption key is rekeyed

Delete Keys

When an encryption key is deleted

Delete Keys on Serv

When encryption keys backed up on the key management server are deleted

Delete Keys on Serv(Auto)

When encryption keys automatically backed up on the key management server are deleted

Delete Specified Key

When an encryption key is deleted
Rekey CEK When the certificate encryption key is rekeyed

Rekey KEK Def

When a key encryption key is rekeyed

Rekey KEK Dynamic

When a key encryption key is rekeyed

Restore Keys

When an encryption key is restored

Restore Keys fr Serv

When encryption keys are restored from a backup on the management PC

Restore Keys fr Serv(Forcibly)

When encryption keys are forcibly restored from a backup on the management PC
Set CEK
  • When the encryption environment is configured
  • When an encryption key is restored from a backup of the KMS or management client

Set DEK

When an encryption key is used

Succeeded Backup to Serv

When a backup of encryption keys is completed.

Key Acquisition

Acquisition Key

When a key encryption key is acquired again

Key Recovery

Restore Keys fr Serv(Boot)

When encryption keys are restored

Set Key Blob

When encryption keys are restored
Use Keys for CEK/KEK
  • When the encryption environment is configured from the initial setting
  • When the certificate encryption key is rekeyed
  • When an encryption module (ENCM) is added or replaced