Vaults

Create a new vault or configure selected existing vault parameters.

General

The vault name, description, external access host (container vaults only), and alert parameters can be changed by pressing Change to modify vault attributes, Setup Vault Migration to move data from one vault to another, Show Filters to change the Tags or Organizations, or Delete Vault to completely remove this vault and its data from the system. This action is not reversible. Press Monitor to shortcut back to the Monitor view for this Vault.

CAUTION:

Deleting a vault is a permanent action. There is no recovery or restore mechanism for a deleted vault.

Note: If Vault Deletion Authorization is enabled, two System Administrators must approve deleting a vault. In order to delete a vault, a System Administrator must first submit a deletion request. This request must then be approved for deletion by another System Administrator within 24 hours of submission.

Note: Vaults take approximately 20 minutes / TB to delete. To minimize the operational impact, create new vaults before deleting old vaults. As space is freed by the deletion process, it will be available for the new vault (s).

Warning: SecureSlice Algorithm is the algorithm that is used to encrypt new and modified objects. If the secure slice algorithm was modified during the lifetime of the vault, a warning icon is displayed. This warning icon indicates that objects in the vault may be encrypted with a different algorithm. For standard vaults, DMS can be used move objects to a new vault. In which case, all the objects are encrypted with the secure slice algorithm specific in the destination vault. For a procedure to re-encrypt objects stored within other vault types, contact IBM Customer Support.

Configuration

The Slicestor devices associated with this Vault, the width, and the thresholds. Press Change at the top of the menu to modify the Alert Level. Selecting the device will shortcut directly to it.

The Segment Size is shown in bytes. The initial data file (source data) is divided into segments, and then each segment is encoded and sliced via the process. The Segment Size may be adjusted when creating a vault using the. This applies to all vaults, both Accesser-based and SDK clients.

The vault is used to identify a specific vault, and may be referenced in the Events Console.

Additional Features

Various vault specific properties will be displayed along with their currently defined value.

Deployment

Once a Vault has been created, it must be "deployed" to be visible by an Accesser pool. [This step does NOT apply to SDK clients.] Available Access Pools are shown; select the plus icon to show devices. Press Change to access the Deployment menu. The Accesser registry update (and Vault availability) may take up to 5 minutes.

S3 Proxy Settings

A S3 proxy redirect may be configured for this vault.

Access Control

For additional data security, the Vault access IP address can be restricted. Press Change to enter authorized addresses. [This does NOT apply to SDK clients.]

Authorized Users

Access permissions must be granted for each object vault. Press Change to enter or modify permissions.

Attention: Any time a device is added or a vault, site, cabinet, or an administration configuration is changed, the Manager device must be backed up by navigating to Settings > Operations > Backup Manually . Permanent data loss can occur if the Manager database becomes corrupted. Periodic backups must also be performed to preserve historical statistics and log information. For details, click the Settings tab, and navigate to Operations > Backup Configuration.