InfoScale™ 9.0 Storage Foundation Administrator's Guide - Windows
- Overview
- Setup and configuration
- Function overview
- About the client console for Storage Foundation
- Recommendations for caching-enabled disks
- Configure basic disks (Optional)
- About creating dynamic disk groups
- About creating dynamic volumes
- Set desired preferences
- Using the GUI to manage your storage
- Working with disks, partitions, and volumes
- Adding storage
- Disk tasks
- Remove a disk from the computer
- Veritas Disk ID (VDID)
- General Partition/Volume tasks
- Mount a volume at an empty folder (Drive path)
- Expand a dynamic volume
- Shrink a dynamic volume
- Basic disk and volume tasks
- Automatic discovery of SSD devices and manual classification as SSD
- Volume Manager space allocation is SSD aware
- Dealing with disk groups
- Disk groups overview
- Delete a dynamic disk group
- Detaching and attaching dynamic disks
- Importing and deporting dynamic disk groups
- Partitioned shared storage with private dynamic disk group protection
- Fast failover in clustered environments
- iSCSI SAN support
- Settings for monitoring objects
- Event monitoring and notification
- Event notification
- Configuring Automatic volume growth
- Standard features for adding fault tolerance
- Performance tuning
- FlashSnap
- FlashSnap components
- FastResync
- Snapshot commands
- Dynamic Disk Group Split and Join
- Dynamic disk group join
- Using Dynamic Disk Group Split and Join with a cluster on shared storage
- Dynamic Disk Group Split and Join troubleshooting tips
- Fast File Resync
- Volume Shadow Copy Service (VSS)
- Using the VSS snapshot wizards with Enterprise Vault
- Using the VSS snapshot wizards with Microsoft SQL
- Copy on Write (COW)
- Using the VSS COW snapshot wizards with Microsoft SQL
- Configuring data caching with SmartIO
- Typical deployment scenarios
- About cache area
- Configuring SmartIO
- Frequently asked questions about SmartIO
- Dynamic Multi-Pathing
- Configuring Cluster Volume Manager (CVM)
- Configuring a CVM cluster
- Administering CVM
- Access modes for cluster-shared volumes
- Storage disconnectivity and CVM disk detach policy
- Unconfiguring a CVM cluster
- Command shipping
- About I/O Fencing
- Administering site-aware allocation for campus clusters
- SFW for Hyper-V virtual machines
- Introduction to Storage Foundation solutions for Hyper-V environments
- Live migration support for SFW dynamic disk group
- Preparing the host machines
- Configuring the SFW storage
- Administering storage migration for SFW and Hyper-V virtual machine volumes
- Optional Storage Foundation features for Hyper-V environments
- Microsoft Failover Clustering support
- Configuring a quorum in a Microsoft Failover Cluster
- Implementing disaster recovery with Volume Replicator
- Volume encryption
- Secure file system (SecureFS) for protection against ransomware
- Troubleshooting and recovery
- Using disk and volume status information
- Resolving common problem situations
- Commands or procedures used in troubleshooting and recovery
- Rescan command
- Repair volume command for dynamic mirrored volumes
- Additional troubleshooting issues
- Disk issues
- Volume issues
- Disk group issues
- Connection issues
- Issues related to boot or restart
- Cluster issues
- Dynamic Multi-Pathing issues
- vxsnap issues
- Other issues
- CVM issues
- Appendix A. Command line interface
- Overview of the command line interface
- vxclustadm
- vxvol
- vxdg
- vxclus
- vxdisk
- vxassist
- vxassist (Windows-specific)
- vxsd
- vxedit
- vxdmpadm
- vxcbr
- vxsnap
- vxscrub
- vxschadm
- sfcache
- Tuning SFW
- Appendix B. VDID details for arrays
- Appendix C. Executive Order logging
Online volume encryption at rest
Volume Manager (VxVM) provides the online volume encryption at rest feature that lets you migrate unencrypted volumes to encrypted ones. Using this feature a volume can be migrated without application downtime, that is, while the file system is mounted and while the I/Os are running. It also avoids complexities, like having to modify application configurations, and has a controlled impact on the application I/O performance.
The online migration process involves mirroring the existing storage configured under a volume, which requires an equal amount of additional storage that gets used in the background.
The process comprises the following phases:
Start
When you initiate this phase, it runs as a background process, during which VxVM takes the following actions:
Creates an encrypted plex with a layered layout under the volume, with the layout type and allocation attributes that you specify. If you do not provide any specific values, the same layout and allocation attributes as those of the unencrypted plex are used.
Synchronizes the data from the original layout to the encrypted layout.
Commit
You can initiate this phase only after the Start phase is complete. In this phase, VxVM takes the following actions:
Swaps the newly created encrypted plex with the original unencrypted one.
Enables encryption on the top-level volume.
Stores the unencrypted plex under a temporary volume for later review and deletion.
Note:
A migration commit operation is not permitted on volumes that have associated snapshots. If the unencrypted volume is part of a volume replication configuration, it may have some associated snapshots. You must first delete any existing volume snapshots and then perform the commit operation. After the volume is successfully migrated to an encrypted volume, you can create a new snapshot policy and take those snapshots again.
Optionally, you can perform the following tasks after the Start phase is completed and before you initiate the Commit phase:
Switch Plex - Lets you switch the reads between the source (unencrypted) and the target (encrypted) plexes; meanwhile, the writes continue to happen on both the plexes. Use this option to verify the data that was copied from the source plex in the Start phase.
Abort - Lets you abort the migration. Any intermediate changes made to the storage configuration are rolled back, without any disruption to the application I/Os.
Additionally, you can monitor and control the online migration operations as follows:
You can monitor the operations by using the vxtask list command.
You can control the operations by using the vxtask -t <TaskID> {pause|resume} command.
The unencrypted volume is migrated to an encrypted one only when both the Start and the Commit phases are completed successfully.
Note:
After the online migration is committed successfully, volume encryption cannot be disabled.
Limitations:
Online migration is not supported in the following cases:
RAID 5 volumes
Volumes with mixed layouts
Volumes configured for VVR replication
Online migration cannot be initiated on an unencrypted volume when SecureFS is enabled. Also, SecureFS cannot be enabled on a volume while online migration is in progress; it can be done only after the migration process is committed successfully.
Only one online migration can be performed on an unencrypted volume at a time.
Only one top-level mirror plex can be migrated at a time.
You can use either the VEA GUI or VxVM commands to migrate unencrypted volumes to encrypted ones.
See Encrypting existing volumes.
See vxassist encmigrate.