Creating an Encrypted Filesystem or LUN (BUI)

A filesystem or LUN that is created within a project inherits properties of the parent project. For a list of properties that can be inherited, see Inherited Properties.

A filesystem or LUN that is created within an encrypted project is automatically encrypted and inherits the encryption settings from the project. You can change the encryption key settings, whether the share is created in an unencrypted project or in an encrypted project.

An easy way to create a set of encrypted shares is to create them in an encrypted project.

Before You Begin

To use encryption, you must first configure a keystore and keys. See Data Encryption.

From the Shares menu, select Shares.
Select either Filesystems or LUNs.
Click the add icon .
Complete the fields in the Create Filesystem or Create LUN dialog box.
- For a filesystem, select a project and enter a name.
- For a LUN, select a project, enter a name, and specify the volume size.
The name must be 1 to 64 characters in length. The name cannot begin with a period (.) and cannot include spaces. Allowable characters are alphanumeric characters and special characters _ - . :
If the parent project for this filesystem or LUN is not encrypted, set an encryption type.

If the parent project for this share is not encrypted, the value of the Encryption field is Off by default. To create an encrypted share, set the Encryption field to a new value. See Understanding Encryption Key Values for descriptions of the values of the Encryption field.

If the parent project for this share is encrypted, the Encryption value is inherited, and you cannot change it.
Select a keystore and a key name.

If the parent project of the share is not encrypted, select a keystore and key name.

If the parent project of the share is encrypted, decide whether to inherit encryption settings from the project. Any share that is created in an encrypted project can be set to inherit the keystore and key name from the project or can specify its own keystore and key name, and then the inherited key values will not be used.
- To inherit the keystore and key name from the project, check the Inherit key check box in the dialog box.
  
  Both Key selections (keystore and key name) are grayed out and not selectable. The key can only be modified from the parent project.
- To set a different keystore and key name, uncheck the Inherit key check box.
  
  Select a keystore and key name.
Click APPLY.