Last year, we acquired an all-flash FAS array (AFF8040) for POC. While this array supports the FDE feature (via SafeNet), the POC requirements did not require us to enable this. As it sometimes goes, POC is potentially turning into “production”
and we are currently taking a look at options to see if it makes sense to convert the POC into an actual purchase. Am hoping some of you may have a bit of experience with enabling FDE encryption on an array *after* data already exists on an array.
Basically, need to know if the existing data can safely remain on the disks if FDE feature is to be introduced now? I’ve only come across a piece of NetApp marketing literature that indicates this should be non-disruptive, while the technical
whitepapers focus on the nuts and bolts of “how to enable FDE”.
Can anyone share definitively whether we must first enable FDE on an array that has SED disks, or whether it is actually safe to introduce FDE on the array after it has been put into use? Would like to avoid having to migrate off the data
and re-configure the array/cluster if I can.
Thanks,
Eric Peng | Enterprise Storage Engineer
Esri | 380 New York St. | Redlands, CA 92373 | USA
T 909 793 2853 x3567 | M 909 367 1691
epeng@esri.com |
esri.com