Start a Conversation

Unsolved

This post is more than 5 years old

5861

June 6th, 2019 19:00

SCv3020 and SED encryption

So we purchased a Dell SCv3020 with an encryption license and all SED disks. Do we have to have a KMS server to use these? When we had this speced out by consultants no one told us anything about Key management servers, which we do not have. Is there a way to use encryption on the SC without a KMS server?

1 Rookie

 • 

23 Posts

June 7th, 2019 09:00

and if a KMS server is a requirement is there a complete list of supported devices out there?

Moderator

 • 

7.6K Posts

June 7th, 2019 09:00

Hello BSH-RESCH,

You don’t have to have KMS to use the drives. The SED drives will go into their own folder and you can create a PagePool.  However, you can’t encrypt the drives without having a KMS. Here is the link to using SED drives in a Compellent system. https://downloads.dell.com/solutions/storage-solution-resources/SCSeriesSED-RA-KeySecure(CML1043)v6.pdf

Please let us know if you have any other questions.

1 Rookie

 • 

23 Posts

June 7th, 2019 10:00

yes, we do want to encrypt the drives, we purchased the encryption license and plan on making use of it. thanks

1 Rookie

 • 

23 Posts

June 7th, 2019 11:00

I am a little bit confused by this statement in the guide you provided

 

Can I turn on encryption at a later date?
Dell Enterprise Plus SED HDD & SSD’s are always encrypting. By using the Secure Data license and a Key Management Server you enable the ability for the drives to be unlocked using an Authority Credential. Without the Secure Data license and the Key Management Server they operate like non-SED drives and provide no additional benefits.

 

Are they always encrypting even without a Key management server?

If I set up my SCv3032 without a KMS, then decided I want to set one up, do I have to rebuild my array or is there an easy transition (I already have SED disks and the encryption license, just no KMS yet)

2 Intern

 • 

230 Posts

June 12th, 2019 08:00

Hello BSH-RESCH,
I can tell you with absolute certainty that your disks will not be encrypted until you configure a Key Management Server. Once you add a Key Management Server the disks are then encrypted. Once the disks are encrypted the Key Management Server will not connect unless the SAN reboots and requests the key. Make sure the server is a physical server, and not a virtual machine.

1 Message

October 29th, 2019 13:00

Dell had a road map to embed the KMS so you would no longer need an external KMS. Do you know if this had been released yet?

Moderator

 • 

7.6K Posts

October 31st, 2019 10:00

Hello QFMQ,

Currently this has not been released yet.  I checked to see if there was an eta for release, however I was not able to get a date of when that will be.

Please let us know if you have any other questions.

1 Message

August 3rd, 2022 20:00

Has Dell added the embed KMS to the ScV3020 yet, or is an external KMS still required?

4 Operator

 • 

2.7K Posts

August 4th, 2022 14:00

Hello @itaadmin,


I am afraid not. As far as I know, embed KMS is not a functionality on ScV3020.


Regards.

1 Rookie

 • 

2 Posts

April 25th, 2024 21:41

Hi good evening, I hope you are all well,

I also have a similar problem, we bought 2.4 TB SED disks, but now when creating TIER it shows errors, but we don't have an encryption license, is it necessary to have this license to use these disks? When purchasing this license, can I use these discs without encryption? We don't need to use encryption.

Moderator

 • 

4K Posts

April 26th, 2024 06:23

Hi,

 

Yes you will still need Self-Encrypting Drive license in order to use SED disk. The license allows you to utilize the drive's self-encrypting capabilities, but it is not mandatory to enable encryption if it is not required for your specific use case.

1 Rookie

 • 

2 Posts

April 26th, 2024 22:31

@DELL-Joey C​ 

Hi Joey,

Could you tell me where I can purchase this license or the part number considering that the Storage is already in EOL?

Product Service TAG: <Information deleted due to privacy - ADMIN>

(edited)

Moderator

 • 

4K Posts

April 29th, 2024 02:45

Hi,

 

Unfortunately I do not have any information about purchasing the license. But upon checking the service tag you gave, you still have warranty. I suggest contacting your sales personel to inquire how to obtain the license to purchase. 

No Events found!

Top