Enabling Drive Security on a Post-Deployment StorageGRID SG6060 with FIPs Disks

I needed to enable drive security on some StorageGRID SG6060 storage nodes. The StorageGRID version is currently 11.9.0.6 and SANtricity is 11.70.5P1.

There is a good NetApp KB:

Enabling security encryption on a StorageGRID Appliance fails - NetApp Knowledge Base

And I am mostly using the text from there, with additions. And - for customer documentation purposes - I capture extra screenshots to make things more clear.

Solution: Post-Deployment

Note: You can only put one node per grid into maintenance mode at a time.

1. Pu
t the StorageGRID storage node into maintenance mode (this will stop all IO operations to the Storage system).
  • From Grid Manager select Nodes -> Select appliance node -> Select Tasks tab -> Click Maintenance Mode -> Enter the provisioning passphrase, and click OK.
2. Disable SSD cache on StorageGRID-flash-cache.
  • In Storage > Pools & Volume Groups
  • Select the StorageGRID-flash-cache pool
  • From the More menu, select Suspend/Resume SSD Cache

  • A green message will popup:  SSD Cache has been suspended

3. Delete the SSD cache.

  • Select Storage -> Pools & Volume Groups -> Select the SSD Cache -> Uncommon Tasks -> Delete
  • A green message will popup: The SSH Cache has been deleted
4. Recreate the SSD cache with Security Enabled.
  • Select Storage > Pools & Volume Groups
  • Click Create > SSD Cache
  • Ensure the "Enable Security?" box is checked.
  • Select both SSD drives.
  • NOTICE: ensure the checkbox labelled 'Enable SSD Cache on existing compatible volumes that are mapped to hosts' is NOT checked when you recreate the SSD cache.
  • A green message will popup: The SSD Cache has been created
5. Enable security on the StorageGRID-disk-pool99
  • Storage > Pools & Volume Groups
  • Select StorageGRID-disk-pool99
  • Click the More menu and select Enable security
  • And confirm



6. Enable SSD Caching on the volume StorageGRID-obj-00,
  • Storage > Volumes 
  • Select StorageGRID-obj-00
  • Click View/Edit Settings
  • On the Advanced tab, tick "Enable SSD Cache"
  • Click Save

7. Rename from SSD_Cache to StorageGRID-flash-cache and verify settings,
  • Storage > Pools & Volume Groups
  • Select the SSD Cache
  • Click View/Edit Settings
  • Change the name to StorageGRID-flash-cache
  • Click Save
It should look like this:


8. Reboot the StorageGRID storage node to release from maintenance mode.
  • NetApp StorageGRID Appliance Installer
  • Advanced > Reboot Controller
  • Reboot into StorageGRID
  • And Confirm

9. Validate the Storage Node returns to a healthy Connected State in Grid Manager

And repeat for how many other nodes you need to do this.

Comments