<font size=2 face="sans-serif">Hi Chris,</font>
<br>
<br><font size=2 face="sans-serif">The Crypto feature of GPFS 4.1 requires
the addition of just one extra RPM over the standard edition. Other RPMs
remain the same.</font>
<br><font size=2 face="sans-serif">It also requires licenses for "Advanced
Edition". These are of the order of 30% more expensive than the standard
edition.</font>
<br>
<br><font size=2 face="sans-serif">The model for GPFS encryption at rest
is that the client node fetches the encrypted file from the fileserver.
</font>
<br><font size=2 face="sans-serif">The file remains encrypted in transfer
and is only decrypted by the client node using a key it holds.</font>
<br><font size=2 face="sans-serif">A result is end-to-end encryption as
well as encryption of data at rest,</font>
<br>
<br><font size=2 face="sans-serif">Encryption can be on a per file level
if desired. Hence a way to migrate from an existing non-encrypted. setup.
</font>
<br><font size=2 face="sans-serif">note inodes should be 4kB to make sure
there is enough room to store the encryption attributes.</font>
<br>
<br><font size=2 face="sans-serif">A side effect of adding encryption is
that you also need additional remote key management (RKM) servers to handle
the key management. These need licensed software.</font>
<br><font size=2 face="sans-serif">see </font><a href="http://www-01.ibm.com/support/knowledgecenter/SSFKCN_4.1.0.4/com.ibm.cluster.gpfs.v4r104.gpfs200.doc/bl1adv_encryptionsetupreqs.htm"><font size=2 color=blue face="sans-serif">http://www-01.ibm.com/support/knowledgecenter/SSFKCN_4.1.0.4/com.ibm.cluster.gpfs.v4r104.gpfs200.doc/bl1adv_encryptionsetupreqs.htm</font></a>
<br>
<br><font size=2 face="sans-serif">I am sure DDN can help you with all
of this.</font>
<br>
<br><font size=2 face="sans-serif">Hope this helps,</font>
<br><font size=2 face="sans-serif">Daniel</font>
<br>
<table width=600 style="border-collapse:collapse;">
<tr height=8>
<td width=600 colspan=4 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;">
<hr>
<tr height=8>
<td width=600 colspan=4 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;">
<tr height=8>
<td width=332 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 face="Arial"><b>Dr.Daniel
Kidger</b></font>
<td width=153 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial">No.
1 The Square,</font>
<td width=113 rowspan=3 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;">
<div align=right><img align=bottom src=cid:_1_0D6A1ED00D6A193C00435AE480257E2A style="border:0px solid;"></div>
<tr height=8>
<td width=332 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial">Technical
Specialist SDI (formerly Platform Computing)</font>
<td width=153 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial">Temple
Quay,<br>
Bristol BS1 6DG</font>
<tr height=8>
<td width=71 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial">Mobile:</font>
<td width=260 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial">+44-07818
522 266</font>
<td width=153 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial">United
Kingdom</font>
<tr height=8>
<td width=71 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial">Landline:</font>
<td width=260 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial">+44-02392
564 121 (Internal ITN 3726 9250)</font>
<td width=153 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial"> </font>
<td width=113 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;">
<tr height=8>
<td width=71 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial">e-mail:</font>
<td width=260 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial">daniel.kidger@uk.ibm.com</font>
<td width=153 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial">
</font>
<td width=113 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;">
<tr height=8>
<td width=600 colspan=4 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;">
<hr></table>
<br>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">From:
</font><font size=1 face="sans-serif">Frank Leers <fleers@gmail.com></font>
<br><font size=1 color=#5f5f5f face="sans-serif">To:
</font><font size=1 face="sans-serif">gpfsug main discussion
list <gpfsug-discuss@gpfsug.org></font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date:
</font><font size=1 face="sans-serif">16/04/2015 23:21</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Subject:
</font><font size=1 face="sans-serif">Re: [gpfsug-discuss]
Experiences upgrading in place to GPFS 4.1?</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Sent by:
</font><font size=1 face="sans-serif">gpfsug-discuss-bounces@gpfsug.org</font>
<br>
<hr noshade>
<br>
<br>
<br><font size=3>Hi Chris,</font>
<br>
<br><font size=3>Since you mention GRIDScaler, I assume that you are a
DDN customer and that you have a support contract with them. If not,
then feel free to take the advice that follows with a measure of salt although
it mostly still applies ;-)</font>
<br><font size=3>With 4.1, there are now 'Editions' of GPFS, which break
out various feature sets into a tiered arrangement, with each tier being
licensed (and possibly priced) differently.</font>
<br><font size=3>Have a look here (Q 1.3) for the 4.1 licensing notes -
</font><a href="http://www-01.ibm.com/support/knowledgecenter/SSFKCN/com.ibm.cluster.gpfs.doc/gpfs_faqs/gpfsclustersfaq.html"><font size=3 color=blue><u>http://www-01.ibm.com/support/knowledgecenter/SSFKCN/com.ibm.cluster.gpfs.doc/gpfs_faqs/gpfsclustersfaq.html</u></font></a><font size=3> </font>
<br>
<br><font size=3>With GPFS 3.5, you are most likely running the equivalent
of the 'Standard Edition' today. The crypto feature set comes with
the 'Advanced Edition', which is licensed differently.</font>
<br>
<br><font size=3>Have a look at Chapter 15 of the Advanced Admin Guide
for 4.1 as a primer ... </font><a href="http://www-01.ibm.com/support/knowledgecenter/SSFKCN_4.1.0.4/gpfs4104_content.html"><font size=3 color=blue><u>http://www-01.ibm.com/support/knowledgecenter/SSFKCN_4.1.0.4/gpfs4104_content.html</u></font></a>
<br>
<br><font size=3>-frank</font>
<br>
<br>
<br><font size=3>On Thu, Apr 16, 2015 at 1:33 PM, Garrison, E Chris <</font><a href=mailto:ecgarris@iu.edu target=_blank><font size=3 color=blue><u>ecgarris@iu.edu</u></font></a><font size=3>>
wrote:</font>
<br><font size=2 face="Calibri">Hello,</font>
<br>
<br><font size=2 face="Calibri">My site is working up to upgrading our
paired GridScaler system from GPFS 3.5 to 4.1. There is a mandate to provide
encryption at rest, and that's an advertised feature of 4.1. We already
have over 100 TB of data, synchronously replicated between two geographically
separated sites, and we have concerns about how the upgrade, as well as
the application of encryption to all that data, will go.</font>
<br>
<br><font size=2 face="Calibri">I'd like to hear from admins who've been
through this upgrade. What gotchas should we look out for? Can it easily
be done in place, or would we need some extra equipment to "slosh"
our data to and from so that it is written to an encrypted GPFS?</font>
<br>
<br><font size=2 face="Calibri">Thank you for your time, and for any sage
advice on this process.</font>
<br>
<br><font size=2 face="Calibri">Chris</font>
<br><font size=2 face="Calibri">--</font>
<br><font size=2 face="Calibri">Chris Garrison</font>
<br><font size=2 face="Calibri">Indiana University</font>
<br><font size=2 face="Calibri">Research Systems Storage</font>
<br><font size=3><br>
_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at </font><a href=http://gpfsug.org/ target=_blank><font size=3 color=blue><u>gpfsug.org</u></font></a><font size=3 color=blue><u><br>
</u></font><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss" target=_blank><font size=3 color=blue><u>http://gpfsug.org/mailman/listinfo/gpfsug-discuss</u></font></a><font size=3><br>
</font>
<br><tt><font size=2>_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at gpfsug.org<br>
</font></tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss"><tt><font size=2>http://gpfsug.org/mailman/listinfo/gpfsug-discuss</font></tt></a><tt><font size=2><br>
</font></tt>
<br><font size=2 face="sans-serif"><br>
Unless stated otherwise above:<br>
IBM United Kingdom Limited - Registered in England and Wales with number
741598. <br>
Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6
3AU<br>
</font>