8 Data Encryption

Note:

Encryption is a licensed feature for certain models. For details, refer to the "Oracle Software License Agreement ("SLA") and Entitlement for Hardware Systems with Integrated Software Options" and the Licensing Information User Manual for the software release.

Oracle ZFS Storage Appliance offers transparent data encryption for pools and for individual shares (filesystems and LUNs) and shares created inside of projects.

To configure and manage encryption, use these tasks:

• Data Encryption Workflow

• Configuring LOCAL Keystore Encryption - BUI, CLI

• Configuring OKM Keystore Encryption - BUI, CLI

• Configuring KMIP Keystore Encryption - BUI, CLI

• Creating an Encrypted Pool - BUI, CLI

• Changing a Pool Encryption Key - BUI, CLI

• Creating an Encrypted Project - BUI, CLI

• Changing a Project Encryption Key - BUI, CLI

• Creating an Encrypted Filesystem or LUN - BUI, CLI

• Changing a Share Encryption Key - BUI, CLI

• Backing up a LOCAL Key - BUI, CLI

• Deleting an Encryption Key - BUI, CLI

• Restoring a LOCAL Key - BUI, CLI

• Cloning a Snapshot - BUI, CLI

To understand data encryption, use these topics:

• Encryption Properties

• Managing Encryption Keys

• Performance Impact of Encryption

• Encryption Key Life Cycle

• Backing Up, Replicating, and Restoring Encrypted Projects and Shares