HP StorageWorks LUN Security XP Extension user guide Part number: T1760-96007 Seventh edition: March 2007
Legal and notice information © Copyright 2005, 2007 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s standard commercial license. The information contained herein is subject to change without notice.
Contents About this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Supported storage platforms and firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Intended audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Prerequisites. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
10 Setting Multiple Extents (Delete All Extents) pane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 11 Error Detail pane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Tables 1 2 3 4 4 Document conventions . . . . . . . . . . . . . . . . LUN Security XP Extension status icons . . . . . Extent icons . . . . . . . . . . . . . . . . . . . . . . . Troubleshooting LUN Security XP Extension . . . . . .
About this guide This guide provides information about: • Starting LUN Security XP Extension • Using LUN Security XP Extension • Using LUN Security XP Extension with other products • Troubleshooting LUN Security XP Extension Supported storage platforms and firmware In this guide, the term array refers to the following storage platforms: • HP StorageWorks XP12000 Disk Array • HP StorageWorks XP10000 Disk Array • HP StorageWorks 200 Storage Virtualization System • HP StorageWorks XP1024 Disk Array • HP Stora
• HP StorageWorks LUN Configuration and Security Manager XP user guide for the XP12000/XP10000/SVS200 • HP StorageWorks LUN Configuration and Security Manager XP user guide for the XP1024/XP128 • HP StorageWorks XP Disk/Cache Partition user guide You can find the above documents at http://www.hp.com/support/rwc/manuals. • HP StorageWorks RAID Manager XP user guide You can find the above documents at http://www.hp.com/support/manuals.
• Error messages • Operating system type and revision level • Detailed, specific questions For continuous quality improvement, calls may be recorded or monitored. Subscription service HP recommends that you register your product at the Subscriber’s Choice for Business web site: http://www.hp.com/go/e-updates. After registering, you will receive e-mail notification of product enhancements, new driver versions, firmware updates, and other product resources.
1 Overview of LUN Security XP Extension HP StorageWorks LUN Security XP Extension protects data on an array from I/O operations performed on open-systems hosts. You can use LUN Security XP Extension to assign an access attribute to each logical volume. If you use LUN Security XP Extension, you can use a logical volume as a read-only volume and protect a logical volume against read and write operations. Use LUN Security XP Extension to suspend data activity within the environment.
• Logical volumes (logical devices) that are not mapped to physical devices Figure 1 Example of access attributes If you change a logical volume’s access attribute to Read Only or Protect, you cannot change the access attribute to Read/Write for a selected time period called the Retention Term. For example, in Figure 1, you cannot change logical volume 01’s access attribute to Read/Write within the next 2,190 days, but you can change logical volume 02’s access attribute because its Retention Term is over.
• Logical volumes specified as Business Copy XP S-VOLs • Logical volumes reserved for Auto LUN XP • Logical volumes with VMA that are blocked • Pool volumes • Virtual volumes • Snapshot XP S-VOLs • Logical volumes to which paths are defined from ports connected to iSCSI targets • Logical volumes you cannot set Volume Management Area (VMA): • Logical volumes with emulation types other than OPEN-V • Logical volumes configured as command devices • NAS system volumes, which are also called system LUs • NAS user
• Products that can start automatically at a specified time: Certain products, such as Auto LUN Monitoring, start automatically at specified times. If a product that can start automatically is enabled, you must perform LUN Security XP Extension operations when the program is not running or cancel the program’s start time setting. • Local array copy software users: NOTE: The following information applies only if you want to set Volume Management Area (VMA).
with logical volume B, LUN Security XP Extension requires license capacity for both logical volumes A and B. Therefore, LUN Security XP Extension needs 4 GB of license capacity. Figure 2 Calculating license capacity (when VMA is set) NOTE: If you do not change the logical volumes’ default access attribute, which is Read/Write, you do not need extra license capacity. For example, in Figure 2, if you set VMA on logical volumes A and B when they do not form a pair, 2 GB of license capacity is enough.
In a case like Figure 4, the required license capacity for the local array copy software is 20 GB, which is the total of the whole capacity of volume A and the S-VOL paired by volume A. In addition, since the extent has the Read Only attribute, the required license capacity for LUN Security XP Extension is also 20 GB. Figure 4 Example of calculating license capacity (when VMA and extent are set) In Figure 4, volume A’s access attribute is Read/Write.
2 Preparing for LUN Security XP Extension operations To use LUN Security XP Extension, install the following: • LUN Security XP Extension license key. • For information about minimum and recommended firmware versions, see the HP StorageWorks XP Remote Web Console user guide for XP12000/XP10000/SVS200. To use the Expiration Lock feature, firmware version 21.10.02 or later is required.
Preparing for LUN Security XP Extension operations
3 LUN Security XP Extension panes LUN Security XP Extension pane The LUN Security XP Extension pane (Figure 6) is the starting point for all LUN Security XP Extension operations. This pane includes the following items: • CU# list: The tree shows a list of CU images. When you select a CU image, the volume list (Figure 6) appears on the right side of the tree. If there are volumes with extents in the CU, those volumes appear under the CU image in the tree.
Table 2 Icon LUN Security XP Extension status icons (continued) Status Logical volumes (with VMA and extent settings) that have the Read Only attribute Logical volumes (without VMA settings) that have the Protect attribute. Logical volumes (with VMA settings) that have the Protect attribute. Logical volumes (with VMA and extent settings) that have the Protect attribute Mainframe volumes and logical volumes (logical devices) that are not mapped to physical storage devices.
If 0 appears, you can change the access attribute to Read/Write. During the retention term, you can change Read Only to Protect, or vice versa. • Mode: Logical volume mode assigned by a RAID Manager XP user. • Zer: Zero Read Cap mode is assigned to the logical volume. If the Read Capacity command (a SCSI command) is issued to a logical volume in Zero Read Cap mode, the logical volume’s capacity is reported as zero. • Inv: Invisible mode is assigned to the logical volume.
Figure 7 The Extent List The extent list provides the following: • Extent ID: Extent numbers. Extents are indicated by the following icons. Table 3 Icon Extent icons Description Extents that have the Read/Write attribute. Extents that have the Read Only attribute. • Attribute: The extent’s access attribute. • LBA: The number on the left of the hyphen indicates the extent’s starting address. The number on the right of the hyphen indicates the extent’s ending address. • Capacity: The extent’s capacity.
NOTE: When 0% continues to appear in Progress, the volume whose extents have been shredded might be blocked and the shredding might not be completed. To finish the shredding, recover the blocked volume and retry the shredding operation using RAID Manager XP. When the extent list appears, the following items appear in the area under the extent list. • Range of LBA: Range of possible extents that can be set in the selected volume. The unit is LBA.
Volume Detail dialog box This dialog box displays a list of logical volumes combined into a LUSE volume (see ”Viewing a list of logical volumes combined into a LUSE volume” on page 29). For more information about LUSE volumes, see the HP StorageWorks LUN Configuration and Security Manger XP user guide for the specific array. Figure 9 Volume Detail dialog box This dialog box includes the following items: • CU:LDEV: CU image number and logical volume number of each volume combined into a LUSE volume.
Error Detail pane This pane displays error locations and LUN Security XP Extension error messages. It does not display Command View XP or XP Remote Web Console error messages. Figure 11 Error Detail pane This pane displays the following items: • Location: Where the error occurred. If an error occurs with a logical volume, this column displays the CU and LDEV numbers (logical volume number). • Error Message: Error message. • OK button: Closes the Error Detail pane.
LUN Security XP Extension panes
4 LUN Security XP Extension operations You must operate Command View XP or XP Remote Web Console in Modify mode to perform LUN Security XP Extension operations. Users in view mode can only view LUN Security XP Extension information. Changing logical volumes’ access attributes Before changing a logical volume’s access attribute, review ”Assigning access attributes to logical volumes” on page 9 and ”Using LUN Security XP Extension with other products” on page 10. 1.
• Dis -> Ena indicates the S-Vol column will change from Disable to Enable. Prohibiting changes to Read/Write volumes after the retention term ends You can use LUN Security XP Extension to ensure that Read Only and Protect volumes cannot be changed to Read/Write volumes after the retention term expires. 1. In the LUN Security XP Extension pane, locate the button next to Expiration Lock. • If the button is OFF -> ON, go to step 2.
NOTE: Disable appears in the S-Vol column in the LUN Security XP Extension pane. In some array copy software manuals, S-VOL Disable might appear. NOTE: To allow a logical volume to be specified as a secondary volume, right-click the logical volume, select S-Vol, and select Enable. Confirm that the logical volume is listed in blue italics, and click Apply. Preventing Command View XP or XP Remote Web Console users from config. LU paths & cmd. devs.
4. Select VMA, and select Set. The logical volume appears in blue and italics. NOTE: If you cannot select VMA, you cannot set VMA to the logical volume. Ensure that the logical volume does not have an LU path. For more information about the conditions of the logical volumes that you cannot set VMA, see ”Using LUN Security XP Extension with other products” on page 10. 5. To set VMA to other logical volumes, repeat step 2 through step 4. Otherwise, go to step 6.
NOTE: You can select multiple volumes at one time if they are all in the same CU. 9. Click Set. The volume selected in the Candidate Volumes box moves to the Target Volumes box. 10. To delete extents on other volumes in different CUs, repeat step 7 through step 9. 11. Click OK. The Setting Multiple Extents (Delete All Extents) pane closes, and the LUN Security XP Extension pane appears. 12. Click Apply. A confirmation message appears. 13. Click OK.
LUN Security XP Extension operations
5 Troubleshooting If an error occurs with LUN Security XP Extension, the Error Detail pane (Figure 11) displays error locations and messages. The Error Detail pane does not include Command View XP or XP Remote Web Console errors. Table 4 Troubleshooting LUN Security XP Extension Problem Solution You cannot find certain logical volumes in the volume list on the LUN Security XP Extension pane.
Troubleshooting
Index A access attributes applications, closing other 10 changing 25 permissions 15 status icons 17 types of 9 Administrators 11 applications, closing other 10, 12 audience, documentation 5 Audit Lock.
applying 25 retention term 25 settings 9 status icons 17 P-VOL settings, restrictions on 12 R RAID Manager XP 11, 18 Read Only attribute applying 25 retention term 25 settings 9 status icons 17 Read/Write attribute applying 25 restrictions on 11 retention term 18, 21, 25 settings 9 status icons 17 Remote Web Console protection 27 restrictions 10 retention term changing 18 Expiration Lock settings 10 extent list 20 modifying 25 setting 21 S security access attributes 9, 10 LU paths, protecting 27 read-only
