VNX D@REs To Be Different

Many industries such as healthcare, financial services and federal and state governments (to name just a few) are requiring more and more controls over sensitive information, like proprietary, employee and customer data. These new requirements are a result of the increase in unauthorized data access internally and from external threats. The net/net: it is becoming increasingly important to have multiple layers of protection including both software mechanisms, like access controls or authentication, and hardware protection mechanisms like Data-At-Rest-Encryption (D@RE). To address this, EMC is announcing that the new VNX Series (announced in September 2013) will support D@RE as a non-disruptive software upgrade, expected in the third quarter of 2014.

With the introduction of the new VNX with MCx, customers are now consolidating more and more virtual machines/workloads on a single VNX, thus making security a requirement now in the midrange. When we looked at how to best implement D@RE in the midrange, we leveraged the best practices and innovations of EMC’s VMAX enterprise storage array. D@RE was introduced on the VMAX over 4 years ago and has since been helping customers protect data written to disk, eliminating data access from unauthorized drive removal (lost or stolen drives).

DARE Value[2]

Like with VMAX, VNX D@RE uses Controller-Based Encryption, which provides the flexibility to support any drive types, speeds and capacities. VNX D@RE also allows the option of turning on encryption, non-disruptively, at any point in time (including after populating the array with data). Contrast this with the approach from most other mid-range array vendors that support data-at-rest encryption through Self-Encrypting Drives. This approach only supports a limited number of drive types, speeds and capacities. They are also limited by the fact that they don’t provide the choice of turning the encryption feature on… as it is always on. In some cases, D@RE can also eliminate the need for data erasure or data shredding services.

VNX D@RE encrypts the entire array and comes with an embedded encryption key manager. File and block data is encrypted and VNX data services like Fully Automated Storage Tiering (FAST), snaps, replication, deduplication, compression, etc. are supported with VNX D@RE.

DARE Summary[1]

When EMC launched the new VNX Series in September 2013, we anticipated adding D@RE support. As a result, new VNX arrays that have shipped are architected with D@RE encryption hardware—and ready to support D@RE software as an optional non-disruptive upgrade.

Want to learn more about what else we announced today around our midrange products? Read the full release here.

For more information on VNX and VNX D@RE you should check out:

Jeff Boudreau

About the Author: Jeff Boudreau