Jeff Boudreau

Senior Vice President and General Manager, Mid-Range Solutions, Core Technologies Division at EMC

Many industries such as healthcare, financial services and federal and state governments (to name just a few) are requiring more and more controls over sensitive information, like proprietary, employee and customer data. These new requirements are a result of the increase in unauthorized data access internally and from external threats. The net/net: it is becoming increasingly important to have multiple layers of protection including both software mechanisms, like access controls or authentication, and hardware protection mechanisms like Data-At-Rest-Encryption (D@RE). To address this, EMC is announcing that the new VNX Series (announced in September 2013) will support D@RE as a non-disruptive software upgrade, expected in the third quarter of 2014.

With the introduction of the new VNX with MCx, customers are now consolidating more and more virtual machines/workloads on a single VNX, thus making security a requirement now in the midrange. When we looked at how to best implement D@RE in the midrange, we leveraged the best practices and innovations of EMC’s VMAX enterprise storage array. D@RE was introduced on the VMAX over 4 years ago and has since been helping customers protect data written to disk, eliminating data access from unauthorized drive removal (lost or stolen drives).

DARE Value[2]

Like with VMAX, VNX D@RE uses Controller-Based Encryption, which provides the flexibility to support any drive types, speeds and capacities. VNX D@RE also allows the option of turning on encryption, non-disruptively, at any point in time (including after populating the array with data). Contrast this with the approach from most other mid-range array vendors that support data-at-rest encryption through Self-Encrypting Drives. This approach only supports a limited number of drive types, speeds and capacities. They are also limited by the fact that they don’t provide the choice of turning the encryption feature on… as it is always on. In some cases, D@RE can also eliminate the need for data erasure or data shredding services.

VNX D@RE encrypts the entire array and comes with an embedded encryption key manager. File and block data is encrypted and VNX data services like Fully Automated Storage Tiering (FAST), snaps, replication, deduplication, compression, etc. are supported with VNX D@RE.

DARE Summary[1]

When EMC launched the new VNX Series in September 2013, we anticipated adding D@RE support. As a result, new VNX arrays that have shipped are architected with D@RE encryption hardware—and ready to support D@RE software as an optional non-disruptive upgrade.

Want to learn more about what else we announced today around our midrange products? Read the full release here.

For more information on VNX and VNX D@RE you should check out:

Jeff Boudreau

Senior Vice President and General Manager, Mid-Range Solutions, Core Technologies Division at EMC

Leave a Comment

The comments are moderated by EMC and EMC reserves the right to remove any content it deems inappropriate, including but not limited to spam, promotional and offensive comments.

Pulse in...

Follow EMC

Archives

Twitter: @EMC_News

Storage provisioning, orchestration and control in a rapidly changing open source ecosystem https://t.co/yWMImJbYF9 https://t.co/sCXrAIzn8H about 2 hours ago
3 steps to keep your data safe and save your business up to $1M per year: https://t.co/ZHb3KMC9Zo https://t.co/ZmWE785a5m about 3 hours ago
Want your #customers to keep coming back? Create a culture of continuous improvement https://t.co/YeNGn5OCNq https://t.co/QIVzyD94DT about 5 hours ago
.@MLBam is modernizing sports and entertainment video streaming with the help of EMC Isilon storage https://t.co/tdQghyjljr about 9 hours ago
Struggling with your IT transformation? We've already found your solution! https://t.co/ZAF0q28Xpo https://t.co/8JSbHKqKuq about 12 hours ago