An encrypted path refers to a path that is encrypted with its own, dedicated encryption key.
The prerequisites are as follows:
The cluster has encryption enabled.
An external EKM is used.
Creating Encrypted Paths
An encrypted path can only be created on a new path. A view can only be created on the path after it is created as an encrypted path.
Creating an encryption path creates a new encryption group and key for the path.
Creating an Encrypted Path from the VAST Web UI
From the left navigation menu, select Element Store and then Encrypted Paths.
Note
The Encrypted Paths tab only appears in the VAST Web UI if EKM encryption is enabled.
Click Create Encrypted Path.
Complete the fields:
Name
Provide a name for the encrypted path.
Tenant
Select the tenant on which want to create the path.
Path
Enter a path under the specified tenant that you want to create and encrypt. This must be a path that does not already exist.
Click Create.
The path is created and an encryption key is created for the path. You can now create a view on the path.
Creating an Encrypted Path from the VAST CLI
Use the encryptedpath create command.
Modifying Encrypted Paths
You cannot change the tenant or the actual path of an existing encrypted path resource. You can only change its name.
Modifying Encrypted Paths from the VAST Web UI
From the left navigation menu, select Element Store and then Encrypted Paths.
Right-click the encrypted path and select Edit.
In the Name field, modify the name.
Click Update.
Modifying Encrypted Paths from the VAST CLI
To modify an encrypted path from the VAST CLI, use the encryptedpath modify command.
Deleting Encrypted Paths
Removing an encrypted path deletes the directory and the encryption group associated with the encrypted path.
Deleting Encrypted Paths from the VAST Web UI
Right-click the encrypted path and select Remove.
Click Yes to confirm the removal.
Deleting Encrypted Paths from the VAST CLI
Use the encryptedpath delete command.