content_image/998849.jpg
SDE explores the in-core encryption acceleration, which is available on VEC and VED (IBM Power Systems P8 and P9) cluster models, with no significant effect on the global performance of the cluster. SDE encryption can be enabled or disabled concurrently with cluster operation by way of TS7700 MI. 

SDT uses OpenSSL software libraries with the TLS1.2 protocol that follow AES standards. AES-256 and AES-128 bit keys are supported. Logical volume data is encrypted within the TS7700 before transport, so no special network requirements are needed. 

Note: SDT cannot be enabled on a stand-alone cluster. FC 5281 is required to enable Secure Data Transfer. 

Figure 9-82 shows an example of an SDT configuration window. 

<img src='content_image/998849.jpg'>

SDT features the following options: 

GLYPH<SM590000> Encryption: This option allows customers to enable and disable encryption and select an AES encryption key size by way of the MI as a concurrent activity. Selecting a key size automatically enables encryption for this TS7700. AES-128 Encryption is enabled with 128-bit or 256-bit encryption. 

GLYPH<SM590000> Protocol: TS7700 supports TLS1.2. 

GLYPH<SM590000> SSL Certificate: The TS7700 uses a default certificate known as “lwiks” for SDT server authentication. Optionally, users can upload their own trusted certificates from the MI SSL Certificate window at Access → SSL Certificate . 

For more information about Secure Data Transfer, see 4.3.9, “Secure Data Transfer” on page 175. 

