Print | Rate this content

HPE MSA 2050 SAN Storage - Installing the Enclosures

FDE considerations

Installing the enclosures

The Full Disk Encryption feature available via the management interfaces requires use of self-encrypting drives (SED) which are also referred to as FDE-capable disk drive modules. When installing FDE-capable disk drive modules, follow the same procedures for installing disks that do not support FDE.

The procedures for using the FDE feature, such as securing the system, viewing disk FDE status, and clearing and importing keys are performed using the SMU or CLI commands.

NOTE: When moving FDE-capable disk drive modules for a disk group, stop I/O to any volumes in the disk group before removing the disk drive modules. Import the keys for the disks so that the disk content becomes available.

While replacing or installing FDE-capable disk drive modules, consider the following:

  • While installing FDE-capable disk drive modules that do not have keys into a secure system, the system will automatically secure the disks after installation. System will associate its existing key with the disks, and user can transparently use the newly-secured disks.

  • While FDE-capable disk drive modules originate from another secure system, and contain that system’s key, the new disks will have the secure, locked status. The data will be unavailable until user enter the passphrase for the other system to import its key. System will then recognize the metadata of the disk groups and incorporate it. The disks will have the status of secure, unlocked and their contents will be available.

    • To view the FDE status of disks, use the SMU or the show fde-state CLI command.

    • To import a key and incorporate the foreign disks, use the SMU or the set fde-import-key CLI command.

      NOTE: If the FDE-capable disks contain multiple keys, user will need to perform the key importing process for each key to make the content associated with each key become available
    • If user do not want to retain the disks’ data, user can repurpose the disks. Repurposing disks deletes all disk data, including lock keys, and associates the current system’s lock key with the disks.

      To repurpose disks, use the SMU or the set disk CLI command.

    • No need to secure system to use FDE-capable disks. If installing all FDE-capable disks into a system that is not secure, they will function exactly like disks that do not support FDE. As such, the data they contain will not be encrypted. If user decide later to secure the system, all of the disks must be FDE-capable.
    • If installed a disk module that does not support FDE into a secure system, the disk will have the Unusable status and will be unavailable for use.

    If user are re-installing FDE-capable disk drive modules as part of the process to replace the chassis FRU, must insert the original disks and re-enter their FDE passphrase.

NOTE: The Fault/UID disk LED displays amber under the following conditions.
  • If an FDE disk is inserted into the storage enclosure in a secured locked state. The disk is unusable by the system, and must either be unlocked or repurposed.
  • If a non-FDE disk is installed into an FDE-secured storage system. The disk is unusable by the system, and must either be replaced with an FDE disk, or FDE must be turned off.

top

Connecting controller and drive enclosures

MSA 2050 controller enclosures support up to eight enclosures (including the controller enclosure). User can cable drive enclosures of the same type or of mixed LFF/SFF model type.

The firmware supports both straight-through and fault-tolerant SAS cabling. Fault-tolerant cabling allows any drive enclosure to fail or be removed while maintaining access to other enclosures. Fault tolerance and performance requirements determine whether to optimize the configuration for high availability or high performance when cabling. MSA 2050 controller enclosures support 12 Gb/s disk drives downshifted to 6 Gb/s. Each enclosure has an expansion port using 6 Gb/s SAS lanes. When connecting multiple drive enclosures, use fault-tolerant cabling to ensure the highest level of fault tolerance.

top

Connecting the MSA 2050 controller to the LFF or SFF drive enclosure

The MSA 2050 LFF Disk Enclosure and the MSA 2050 SFF Disk Enclosure can be attached to an MSA 2050 controller enclosure using supported mini-SAS to mini-SAS cables of 0.5 m (1.64 in ) to 2 m (6.56 in) length. Each drive enclosure provides two 0.5 m (1.64 in ) mini-SAS to mini-SAS cables. Longer cables may be desired or required, and can be purchased separately.

Cable requirements for MSA 2050 enclosures

NOTE:
  • When installing SAS cables to expansion modules, use only supported mini-SAS x4 cables with SFF-8088 connectors supporting 6Gb application.
  • See the QuickSpecs for information about which cables are provided with MSA 2050 products.
  • The maximum expansion cable length allowed in any configuration is 2 m (6.56 in).
  • When adding more than two drive enclosures, user may need to purchase additional 1 m or 2 m cables, depending upon number of enclosures and cabling method used:
    • Spanning 3, 4, or 5 drive enclosures requires 1 m (3.28 in) cables.
    • Spanning 6 or 7 drive enclosures requires 2 m (6.56 in) cables.
  • Cables supported for host connection:

    • Qualified Fibre Channel SFP and cable options.
    • Qualified 10GbE iSCSI SFP and cable options.
    • Qualified 1 Gb RJ-45 SFP and cable options.

Figure 1: Cabling connections between the MSA 2050 controller and a single drive enclosure

Item
Description
1
LFF 12-1 drive or SFF 24-drive enclosure

Figure 2: Cabling connections between MSA 2050 controllers and LFF and SFF drive enclosures

Item
Description
1
LFF 12-drive or SFF 24-drive enclosure

The diagram at left (above) shows fault-tolerant cabling of a dual-controller enclosure cabled to either the MSA 2050 LFF Disk Enclosure or the MSA 2050 SFF Disk Enclosure featuring dual-expansion modules. Controller module 1A is connected to expansion module 2A, with a chain of connections cascading down (blue). Controller module 1B is connected to the lower expansion module (5B), of the last drive enclosure, with connections moving in the opposite direction (green). Fault-tolerant cabling allows any drive enclosure to fail - or be removed - while maintaining access to other enclosures.

The diagram at right (above) shows the same storage components connected using straight-through cabling. Using this method, if a drive enclosures fails, the enclosures that follow the failed enclosure in the chain are no longer accessible until the failed enclosure is repaired or replaced.

Figure 3: Fault-tolerant cabling connections showing maximum number of enclosures

Item
Description
1
LFF 12-drive enclosure or SFF 24-drive enclosure
NOTE: The maximum number of supported drive enclosures (7) may require purchase of additional longer cables.

top

Testing enclosure connections

Once the power-on sequence for enclosures succeeds, the storage system is ready to be connected to hosts

top

Legal Disclaimer: Products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may have older product names and model numbers that differ from current models.

Provide feedback

Please rate the information on this page to help us improve our content. Thank you!
Document title: HPE MSA 2050 Storage - Installing the Enclosures
Document ID: emr_na-a00022337en_us-2
How helpful was this document?
How can we improve this document?
Note: Only English language comments can be accepted at this time.
Please wait while we process your request.