UCS support for data-at-rest encryption with self encrypting disks

[rcherukuri]

We currently have a bunch of UCS C240 M4SX servers with Samsung SSD drives (model: MZ-7LM1T9HMJP) which are data nodes within our computing cluster. An enterprise requirement is that data persisted on disk within this environment be fully encrypted.

(1) How can we determine if these disk drives are capable of supporting self-encryption?

(2) If they are, how do we then determine if UCS and these servers are actually encrypting data at rest?

By the way, our current UCS Manager version is 3.2(2c). Thanks!

[Kirk J · Accepted solution]

Greetings.

Please check the spec sheet (https://www.cisco.com/c/dam/en/us/products/collateral/servers-unified-computing/ucs-c-series-rack-servers/c240m4-sff-spec-sheet.pdf ) for the supported drive list.

You can go into UCSM, open the server in question, inventory, storage, disks, expand the controller in question, to see your disks in question.  In the disk properties pane, there should be a security section.  It may simply say Security: none

Doing a search in ucsm capability catalog, I found a similar match:

SAMSUNG MZ7LM1T9HMJP-00003

sku="UCS-SD19TBKSS-EV"
description="1.9TB 2.5 inch Enterprise Value 6G SATA SSD"

which does not appear to be a SED capable drive.

Kirk...

[rcherukuri]

Kirk J,

Got it! Thanks a lot for the quick response and guidance with respect to verifying this within UCSM for enablement of SED policies.

Ram