The Full Disk Encryption (FDE) operation provides security for drives that are lost, stolen, or removed from an array subsystem or an internal RAID Controller (PERC). The FDE operation provides a Secure Erase option for encryption-capable internal drives. The following options are available in FDE:
FDE Option | Description |
---|---|
Query FDE Status | Provides a summary of the FDE status for FDE capable storage in the system. |
Enable FDE | Enables FDE on all arrays and 7200/7210 IntelliBase internal storage in the system that are FDE capable. |
Reprovision/Repurpose Drives | Reprovisions/repurposes drives on selected arrays. |
Secure Erase | Executes a secure erase operation on 7200/7210 IntelliBase internal storage and other select internal drives. |
Important information to note about the Full Disk Encryption operation:
- FDE is supported on NetApp Sandhawk (5700) controllers and requires Controller Firmware version 8.50 or higher.
- FDE is supported on NetApp Arapaho (280X) controllers and requires Controller Firmware version 8.30 or higher.
- FDE is supported on NetApp external storage arrays with Snowmass (2660) or Soyuz (5501) controllers, and requires Controller Firmware version 7.80 or higher. FDE is also supported on NetApp Titan (5600) controllers, and requires Controller Firmware version 8.20 or higher
- FDE is supported on DotHill external storage arrays.Controller Firmware version CF101XXXX does not support FDE.
- FDE is supported on Linux systems only.
- Out-of-band management communication between PUT and the storage array controllers is required.
- Secure Erase is used for internal drives only, not drives in an external array.