Creating an Encrypted Project (BUI)

A project inherits properties of the parent pool. A share inherits properties of the parent project. For a list of properties that can be inherited, see Inherited Properties.

A project that is created in an encrypted pool is automatically encrypted, and inherits the encryption settings from the pool. You can change the encryption key settings, but you cannot unencrypt the project and you cannot create an unencrypted project in an encrypted pool.

This procedure describes how to create an encrypted project in either an encrypted pool or an unencrypted pool.

Before You Begin

To use encryption, you must configure it first. See Data Encryption.

From the Shares menu, select Projects.
Click the add icon next to Projects or in the expanded Projects panel. To expand the Projects panel, click its arrow icon.
In the Create Project dialog box, enter a name for the new project.

The name must be 1 to 64 characters in length. The name cannot begin with a period (.) and cannot include spaces. Allowable characters are alphanumeric characters and special characters _ - . :
If the parent pool for this project is not encrypted, set an encryption type.

If the parent pool for this project is not encrypted, the value of the Encryption field is Off by default. To create an encrypted project, set the Encryption field to a new value. See Understanding Encryption Key Values for descriptions of the values of the Encryption field.

If the parent pool for this project is encrypted, the Encryption value is inherited, and you cannot change it.
Select a keystore and a key name.

If the parent pool of the project is not encrypted, select a keystore and key name.

If the parent pool of the project is encrypted, decide whether to inherit encryption settings from the pool. Any project or dataset that is created in an encrypted pool, including the default project, can be set to inherit the keystore and key name from the pool or can specify its own keystore and key name, and then the inherited key values will not be used.
- To inherit the keystore and key name from the pool, check the Inherit key check box in the dialog box.
  
  If a project inherits encryption settings from the pool, then all of the project’s datasets inherit encryption settings from the pool.
  
  When you check the Inherit key check box, both Key selections (keystore and key name) are grayed out and not selectable. The key can only be modified from the parent pool.
- To set a different keystore and key name, uncheck the Inherit key check box. Select a keystore and key name.
Set other properties as appropriate for this project.

Project properties are described in Project Properties.
Click APPLY.

The new project is added to the Projects list.

All shares created under this project are automatically encrypted with these encryption values, although the Key values can be changed. See Creating an Encrypted Filesystem or LUN (BUI).