Go to main content

Oracle® ZFS Storage Appliance Administration Guide, Release OS8.7.x

Exit Print View

Updated: November 2018
 
 

Deleting an Encryption Key (BUI)

Deleting an encryption key is a fast and effective way to make large amounts of data inaccessible. Keys can be deleted even if they are in use. If the key is in use, a warning is given and confirmation is required. All shares or projects using that key are unshared and can no longer be accessed by clients.

If you might use a LOCAL key again to access its associated shares, back up the keyname and value before deleting the key. Then you can later perform a restore procedure as described in Restoring a LOCAL Key (BUI).

Use the following procedure to delete a LOCAL or OKM encryption key.

  1. Navigate to Shares > Encryption.
  2. Select Local or OKM.
  3. Move your cursor over the key that you want to delete and click the Delete icon image:Delete item .

    The following alert is displayed:


    image:Deleting Key Alert
  4. To delete the key, click OK, or to keep the key, click Cancel.

    When a key is deleted, all of the data in all of the shares that use the key becomes inaccessible. This is equivalent to secure data destruction and is permanent and irrevocable, unless you have prepared for key restoration by backing up the key. For more information about key backup and restoration, see Backing Up a LOCAL Key (BUI) and Restoring a LOCAL Key (BUI).

Related Topics