You can enable encryption on a bucket to protect the data it stores. VSP One Object uses DARE, a hardware-based encryption feature that automatically encrypts and decrypts data written to or read from the system’s drives. This protects data if a physical drive is lost or removed from the system.
DARE encryption is enabled at the system level during initial setup by an administrator. Once DARE is active, you can choose to enable encryption on individual buckets when creating or modifying them. This ensures that all objects stored in those buckets are secured using AES-256 encryption without requiring additional user actions or affecting application performance.
When DARE encryption is enabled on a system, the Enable Encryption toggle becomes available.
To add DARE encryption to a bucket:
- From the navigation pane, select S3 > Buckets.
- Click a bucket's name or its View button to select it.
- Click the Properties tab.
- Click the Enable Encryption toggle to enable DARE encryption.
- Click Update.