Administrator Guide

The Encryption page is displayed, which displays the current encryption status of the DR Series system.
2. Click Set or Change Passphrase.
The Set or Change Passphrase dialog box opens.
3. In the Passphrase and Confirm Passphrase text boxes, enter the passphrase to be used to encrypt content
encryption keys.
When creating a passphrase, follow these guidelines:
• The passphrase string can take up to 256 characters.
• Alphanumeric and special characters can be entered as part of the passphrase string.
NOTE: Input/output operations for the DR Series system will halt during passphrase configuration, and the
system will resume after passphrase submission.
4. Click the Submit button.
Enabling Encryption
To enable encryption for the DR Series system, complete the following steps:
1. Select Storage → Encryption.
The Encryption page is displayed, which shows the current status of encryption of the DR Series system.
2. Click Encryption Settings.
The Encryption Settings dialog box opens.
3. Next to Encryption, click ON.
4. Next to Mode, select the mode of key lifecycle management from one of the following options:
• Static — A global, fixed key is used to encrypt all data.
• Internal — Content encryption keys are generated and rotated on a specified period of days.
5. If you selected Internal as the mode of key management, next to Key Rotation Interval in Days, enter the number of
days for key rotation when a new key is to be generated.
In internal mode there is a maximum limit of 1023 keys. The default key rotation period is set to 30 days by default
when the passphrase is set and/or encryption is turned on. You can later change the key rotation period from 7
days to 70 years for internal mode.
6. Click the Submit Encryption Settings button.
After encryption is enabled, all of the data that is backed up is encrypted and is kept encrypted until it is expired and
cleaned by the system cleaner. Note that encryption is an irreversible process.
Changing Encryption Settings
NOTE: Key modes can be changed at any time during the lifetime of the DR Series system; however, changing the
key mode can be a significant operation to undertake as all encrypted data must be re-encrypted.
To change current encryption settings, complete the following steps:
1. Select Storage → Encryption.
The Encryption page is displayed, which lists the current status of encryption on the DR Series system.
2. Click Encryption Settings.
The Encryption Settings dialog box opens.
3. Next to Mode, you can change the mode of key lifecycle management from one of the following options:
75