Abstract: The present invention curbs encryption key information used in a virtual logical volume and improves security. A storage management function 33201 is configured to provide to a host computer a virtual logical volume 327 created on the basis of a pool volume 324. The storage management function is configured to allocate a prescribed page from among pages in the pool volume to a virtual logical volume in accordance with a write request from the host computer. The storage management function is configured to select a page to be allocated to the virtual logical volume on the basis of information regarding encryption key information associated with a page that has been allocated to the virtual logical volume and information regarding encryption key information associated with a page capable of being allocated to the virtual logical volume from the pages managed in the pool.

Abstract: A storage system has a management computer and a storage device, where the storage device is connected to an external storage device and includes a first processor, a storage medium on which a plurality of logical storage devices is based, and a plurality of ports. The management computer includes a memory and a second processor, the memory storing port information, path information between host and storage device indicating the association between a host computer and the plurality of logical storage devices and ports, and path information between storage devices indicating the association between the external storage device and the plurality of logical storage devices and ports. The second processor executes band accommodation processing on either a path between host and storage device or a path between storage devices on the basis of the port information, the path information between host and storage device, and the path information between storage devices.

Abstract: A storage system according to the present invention includes multiple real storage subsystems, and defines a virtual storage subsystem composed of resources included in one or multiple real storage subsystems. Upon defining a virtual storage subsystem, a virtual logical partition corresponding to a real storage subsystem is provided in the virtual storage subsystem, and a logical partition correlation information which is attribute (limitation) information showing whether various resource management operations extending over virtual logical partitions can be executed or not to each pair within the multiple virtual logical partitions is created and managed.

Abstract: A migration destination storage apparatus among a plurality of storage apparatuses and has a controller for sending or receiving information to or from a host computer and managing each migration destination volume as an access target of the host computer. The controller manages each migration destination volume by dividing the migration destination volumes into a plurality of resource groups based on identification information for identifying each migration source volume; manages a plurality of resources related to each migration destination volume by associating them with each resource group; and manages each migration destination volume and each resource belonging to each resource group as operation targets to be allocated individually to each migration source user who uses each migration source volume, and as operation targets over which only each migration source user has operation authority.

Abstract: An example is a method of controlling a storage system for providing a virtual storage apparatus that includes virtual storage resources associated with real storage resources of real storage apparatus. It includes receiving a virtual storage resource control command of a predetermined type specifying a first virtual storage resource in the virtual storage apparatus and a second virtual storage resource associated with the first virtual storage resource; referring to management information for managing association relations between the virtual storage resources and the real storage resources, to identify a first real storage resource associated with the first virtual storage resource and a first real storage apparatus including the first real storage resource; and selecting a second real storage resource associated with the second virtual storage resource from real storage resources within the first real storage apparatus, or creating the second real storage resource within the first real storage apparatus.

Abstract: A computer system includes a plurality of processing computers which switches an execution time of a main function processing and a management function processing in a given time, and a management computer which has a schedule table showing a schedule in which each processing computer may execute the management function processing, and which is capable of instructing the execution of the management function processing to each processing computer, wherein the processing computer notifies a start time an end time of the management function processing to the management computer before starting the management function processing, and the management computer updates the schedule table with the notification, an decides the processing computer that may execute the management function processing, by referring to the schedule table, upon instructing the management function processing to the processing computer.

Abstract: A storage device partitions data from a host into multiple partitioned data and distributes, encrypts and stores them together with a parity in multiple memory mediums. This storage device executes processing of restoring the partitioned data or the parity stored in a memory medium subjectable to encryption re-key based on decrypted data of the partitioned data or the parity stored in each memory medium other than the memory medium subjectable to encryption re-key among the multiple memory mediums, storing the restored partitioned data or the parity in a backup memory medium while encrypting the restored partitioned data or the parity with a new encryption key, and thereafter interchanging the backup memory medium and the memory medium subjectable to encryption re-key so that the backup memory medium will be a memory medium configuring the parity group and the memory medium subjectable to encryption re-key will be the backup memory medium.

Abstract: A storage management system, if the required response performance of the file is added to the access request from the host computer, compares the required response performance of the file with the response performance of the pool volume assigned to the page. If the response performance of the compared pool volume does not satisfy the required response performance, the storage management system selects a pool volume whose response performance satisfies the required response performance from the pool volumes, migrates the page to the selected pool volume, and stores the data in the page to which the pool volume is assigned.

Abstract: An example is a method of controlling a storage system for providing a virtual storage apparatus that includes virtual storage resources associated with real storage resources of real storage apparatus. It includes receiving a virtual storage resource control command of a predetermined type specifying a first virtual storage resource in the virtual storage apparatus and a second virtual storage resource associated with the first virtual storage resource; referring to management information for managing association relations between the virtual storage resources and the real storage resources, to identify a first real storage resource associated with the first virtual storage resource and a first real storage apparatus including the first real storage resource; and selecting a second real storage resource associated with the second virtual storage resource from real storage resources within the first real storage apparatus, or creating the second real storage resource within the first real storage apparatus.

Abstract: An example of the present invention is a storage system comprising a first real storage apparatus including a plurality of real resources. The first real storage apparatus includes: real resource groups allocated to a plurality of virtual storage apparatuses; first management information for associating virtual resource identifiers individually assigned to real resources in a namespace independently defined for each of the plurality of virtual storage apparatuses with real resource identifiers individually assigned to the real resources in a namespace defined for the first real storage apparatus; and a controller for receiving a command including a designation with a virtual resource identifier, converting the virtual resource identifier in the command into a real resource identifier with reference to the first management information, and processing the command with the converted real resource identifier.

Abstract: A storage management system, if the required response performance of the file is added to the access request from the host computer, compares the required response performance of the file with the response performance of the pool volume assigned to the page. If the response performance of the compared pool volume does not satisfy the required response performance, the storage management system selects a pool volume whose response performance satisfies the required response performance from the pool volumes, migrates the page to the selected pool volume, and stores the data in the page to which the pool volume is assigned.

Abstract: Resources migrated from migration source storage apparatuses to a migration destination storage apparatus are appropriately allocated to each migration source user. A migration destination storage apparatus among a plurality of storage apparatuses and has a controller for sending or receiving information to or from a host computer and managing each migration destination volume as an access target of the host computer.

Abstract: A computer system regarding which there is no possibility that data loss or data leakage will occur caused by volume migration is provided. The computer system includes: a memory resource to be accessed by a host computer; a storage system for providing a volume, which logicizes the memory resource, to the host computer; and a management device for managing migration of the volume. When detecting a task of migration of the volume based on a request from a first administrator, the management device compares an encryption function setting status of the volume with the encryption function setting status of a migration destination object of the volume; and sends notice of this comparison result to a second administrator, who is different from the first administrator, for security management of the storage system.

Abstract: A migration destination storage apparatus among a plurality of storage apparatuses and has a controller for sending or receiving information to or from a host computer and managing each migration destination volume as an access target of the host computer. The controller manages each migration destination volume by dividing the migration destination volumes into a plurality of resource groups based on identification information for identifying each migration source volume; manages a plurality of resources related to each migration destination volume by associating them with each resource group; and manages each migration destination volume and each resource belonging to each resource group as operation targets to be allocated individually to each migration source user who uses each migration source volume, and as operation targets over which only each migration source user has operation authority.

Abstract: When removing an HDD, in which a failure has occurred, after the execution of hot swap in a storage apparatus having a stored data encryption function, an encryption key assigned to that HDD is shredded and thereby data in the HDD is automatically crypto-shredded; and after a new HDD is installed, data in a spare disk regarding which copy back to the new HDD is completed is automatically crypto-shredded and key generation for the spare disk is requested to a security administrator in preparation for the next hot swap.

Abstract: The present invention makes it possible to reassess respective host paths and reset priorities in accordance with the current state of a storage system. A management computer 400, in a case where either a failure or a configuration change occurs inside the storage system, assesses the respective host paths 501 through 506 in accordance with the status of a first communication network 500 and the status of a second communication network 600. The management computer 400, based on these assessment results, resets the priority of each host path. an alternate path program 112 of the host 100 are notified of the priorities, which have been set.

Abstract: A computer system regarding which there is no possibility that data loss or data leakage will occur caused by volume migration is provided. The computer system includes: a memory resource to be accessed by a host computer; a storage system for providing a volume, which logicizes the memory resource, to the host computer; and a management device for managing migration of the volume. When detecting a task of migration of the volume based on a request from a first administrator, the management device compares an encryption function setting status of the volume with the encryption function setting status of a migration destination object of the volume; and sends notice of this comparison result to a second administrator, who is different from the first administrator, for security management of the storage system.

Abstract: A storage system including a first storage apparatus having at least one volume to be provided to a host computer, a second storage apparatus connected to the first storage apparatus and having a second volume having a pair relationship with a first volume, and a management apparatus. The management apparatus includes a user interface for setting an attribute of functions related to at least one volume of the first storage apparatus and at least one volume of the second storage apparatus. The management apparatus compares an attribute of a first function related to the first volume and an attribute of a second function related to the second volume, and sets the attribute of the second function to be consistent with the attribute of the first function. The management apparatus there commands restoration of the first volume or the second volume to a state before the set the attribute operation.

Abstract: Provided is a storage device which partitions data from a host into multiple partitioned data and distributes, encrypts and stores them together with a parity to and in multiple memory mediums. This storage device executes processing of restoring the partitioned data or the parity stored in a memory medium to be subject to encryption re-key based on decrypted data of the partitioned data or the parity stored in each memory medium other than the memory medium to be subject to encryption re-key among the multiple memory mediums, storing the restored partitioned data or the parity in a backup memory medium while encrypting the restored partitioned data or the parity with a new encryption key, and thereafter interchanging the backup memory medium and the memory medium to be subject to encryption re-key so that the backup memory medium will be a memory medium configuring the parity group and the memory medium to be subject to encryption re-key will be the backup memory medium.

Abstract: Resources migrated from migration source storage apparatuses to a migration destination storage apparatus are appropriately allocated to each migration source user. A migration destination storage apparatus among a plurality of storage apparatuses and has a controller for sending or receiving information to or from a host computer and managing each migration destination volume as an access target of the host computer.