Disabling data encryption on a parity group that contains pool volumes

Encryption License Key User Guide

Version
9.8.7
Audience
anonymous
Part Number
MK-98RD9017-17
Use this procedure to disable encryption on a parity group that contains pool volumes.

You can disable encryption on a parity group that contains pool volumes only under the following conditions:

  • The parity group must not contain any volumes, or all volumes in the parity group must be blocked. If the parity group contains any unblocked volumes, you must block the volumes before encryption can be disabled.
  • Accelerated compression must not be enabled on the parity group. If accelerated compression is enabled, you must disable accelerated compression before encryption can be disabled. For details about disabling accelerated compression, see the Provisioning Guide.
  • If the parity group contains a pool volume associated with a pool for which capacity saving is enabled, you must disable the capacity saving setting on the pool before encryption can be disabled.
  • You must have the following user roles:
    • Security Administrator (View & Modify) role to disable encryption
    • Storage Administrator (Provisioning) role to block or format volumes during the disable encryption operation
    • Storage Administrator (Provisioning) role to block or format virtual volumes during the disable encryption operation
    • Storage Administrator (Provisioning) role to disable capacity saving during the disable encryption operation
    • Support Personnel (Vendor Only) role to block or format pool volumes during the disable encryption operation
  1. On the Explorer pane, select Storage Systems, expand Pools, and then click the pool to which the target parity group belongs.
  2. Select the Virtual Volumes tab, and check the settings in the Capacity Saving Status column:
    • If the Capacity Saving Status of all volumes is Disabled, go to the next step.
    • If the Capacity Saving Status of all volumes is not Disabled, perform the following actions for each volume whose capacity saving status is not disabled:
      1. Block the volume.
      2. Format the volume.
      3. Disable the capacity saving setting on the volume.
      4. Verify that Capacity Saving Status of the volume shows Disabled.
  3. On the Virtual Volumes tab, check the LDEV status in the Status column of the table:
    • If the status of all LDEVs is Blocked, or if there are no LDEVs, go to the next step.
    • If there are LDEVs and the status of all LDEVs is not Blocked, one or more LDEVs is not blocked. Block all LDEVs that are not blocked, and then go to the next step.
    CAUTION:
    To block the deduplication system data volumes, you must first block all virtual volumes with Deduplication Data enabled in the pool. If not, the deduplication system data volumes cannot be blocked.
  4. Disable data encryption for all parity groups in the target pool as follows:
    1. On the Explorer pane, select Parity Groups.
    2. On the Parity Groups tab, confirm that all volumes in the target parity group are blocked (Blocked is displayed in the LDEV Status column).
      If the LDEV status of the parity group is not Blocked, block the volumes. You will not be able to disable encryption if the parity group contains unblocked volumes.
    3. On the Parity Groups tab, select the target parity group, and then click More Actions > Edit Encryption.
    4. In the Edit Encryption window, select the parity group, select Disable for Encryption, and select the desired format type for Format Type.
      If the parity group contains a pool volume, select Normal Format. If you select Quick Format, an error will occur when you perform the task.

      If the parity group consists of FMD drives, select No Format. If you select Quick Format or Normal Format, an error will occur when you perform the task.

    5. Click Add.
      The parity group is added to the Selected Parity Groups list.

      If there are no volumes in the parity group, the format type in the Selected Parity Groups list is displayed as a hyphen (-).

    6. If you want to change the format type of a parity group in the Selected Parity Groups list, select the parity group, click Remove, and then add the parity group to the Selected Parity Groups list again with the desired format type.
    7. When you are finished adding parity groups to the Selected Parity Groups list, click Finish.
    8. In the Confirm window, confirm the settings, and enter your task name in Task Name.
      If you want the Tasks window to open after you click Apply, select Go to tasks window for status.
    9. Click Apply, and then click OK in the message that appears.
  5. If there are no deduplication system data volumes, go to step 7. If there are deduplication system data volumes, click More Actions > Initialize Duplicated Data to display the Initialize Duplicated Data window.
  6. Click Apply.
    The tasks are registered. If Go to tasks window for status is checked, the Tasks window opens.
  7. Click the Virtual Volumes tab, and then format all LDEVs whose status in the Status column of the table is Blocked.
    CAUTION:
    To format the virtual volumes with Deduplication Data enabled, you must first format the LDEVs of deduplication system data volumes (data store) in the pool. If not, the virtual volumes with Deduplication Data enabled cannot be formatted.