Abstract: A technique is directed to providing dynamic redundant array of independent disks (RAID) transformation which involves measuring a set of storage array parameters for an existing RAID configuration residing in a storage array. The technique further involves identifying a new RAID configuration to use in place of the existing RAID configuration based on the measured set of storage array parameters. The technique further involves, after the new RAID configuration is identified, transforming the existing RAID configuration into the new RAID configuration.

Abstract: A technique is directed to providing dynamic redundant array of independent disks (RAID) transformation which involves measuring a set of storage array parameters for an existing RAID configuration residing in a storage array. The technique further involves identifying a new RAID configuration to use in place of the existing RAID configuration based on the measured set of storage array parameters. The technique further involves, after the new RAID configuration is identified, transforming the existing RAID configuration into the new RAID configuration.

Abstract: Techniques involve: acquiring, through a first downstream port of a first switch of a data storage system, information indicating an error of a storage device array from a second switch of the data storage system, wherein the first switch and the second switch are connected to the storage device array and the first downstream port is connected to a second downstream port of the second switch; executing, based on the acquired information, actual actions intended for solving the error; and in response to the executed actual actions failing to match with expected actions for the error, issuing an alarm indicating failure of processing the error.

Abstract: Techniques involve: acquiring, through a first downstream port of a first switch of a data storage system, information indicating an error of a storage device array from a second switch of the data storage system, wherein the first switch and the second switch are connected to the storage device array and the first downstream port is connected to a second downstream port of the second switch; executing, based on the acquired information, actual actions intended for solving the error; and in response to the executed actual actions failing to match with expected actions for the error, issuing an alarm indicating failure of processing the error.

Abstract: An apparatus comprises a storage system, a key manager incorporated in or otherwise associated with the storage system, and an input-output controller coupled to the key manager and configured to control storage of data items in the storage system. The key manager is configured to determine a controller key accessible to the input-output controller and a plurality of data encryption keys utilizable by the input-output controller to encrypt the data items for storage in the storage system. A given one of the data items is encrypted using a particular one of the data encryption keys and has associated metadata that includes the particular data encryption key encrypted using the controller key. The metadata may comprise an inner wrapping of the particular data encryption key using the controller key and at least one outer wrapping of the inner wrapping using at least one additional key.

Abstract: One embodiment is directed to a technique which secures data on a set of storage drives of a data storage system. The technique involves encrypting data from a first tenant using a first tenant key to form first tenant encrypted data and storing the first tenant encrypted data on the set of storage drives. The technique further involves encrypting data from a second tenant using a second tenant key to form second tenant encrypted data and storing the second tenant encrypted data on the set of storage drives, the first tenant being different from the second tenant, and the first tenant key and the second tenant key being per tenant keys which are different from each other. The technique further involves destroying the first tenant key to prevent the first tenant encrypted data stored on the set of storage drives from being decrypted while maintaining the second tenant key to enable decryption of the second tenant encrypted data stored on the set of storage drives.

Abstract: An apparatus comprises a storage system and a key manager incorporated in or otherwise associated with the storage system. The storage system comprises first storage of a first type and second storage of a second type with the first storage providing enhanced data protection relative to the second storage. The key manager is configured to maintain a master key hierarchy for the storage system. The master key hierarchy comprises a plurality of levels each including one or more master keys, with an uppermost level of the master key hierarchy comprising a root master key that is stored in the first storage and at least one lower level of the master key hierarchy comprising a plurality of master keys that are stored in the second storage under encryption by the root master key. Keys of a lowermost level of the master key hierarchy are associated with respective groups of data items.

Abstract: An apparatus comprises a storage system and a key manager incorporated in or otherwise associated with the storage system. The storage system is configured to store data items across a plurality of dimensions with each such dimension comprising a plurality of classes. The key manager is configured to assign class keys to respective ones of the classes of each of the dimensions. A given one of the data items associated with at least one of the classes in each of two or more of the dimensions is encrypted for storage in the storage system using a multidimensional key determined as a function of the class keys corresponding to respective ones of the classes with which that data item is associated. Such an arrangement allows all of the data items associated with a given one of the classes to be deleted by deleting the class key assigned to the given class.

Abstract: Communications settings are managed. System characteristics are determined that affect communications on a high speed transmission link between nodes. The system characteristics includes system hardware information and physical characteristics of a cable. Tuning information is derived from the system characteristics. At least some of the tuning information is communicated between the nodes.

Abstract: A system sets a disk access inhibitor flag whenever a disk drive is placed by the system in an inaccessible condition. The drive operates to set a bit therein when the drive has placed itself in a by-pass condition. During each polling event, the system determines: (1) whether the bit has been set; and (2) whether the disk access inhibitor flag has been set. If the bit has been set and such disk access inhibitor flag has been set, the system maintains the drive in the inaccessible condition; otherwise, the drive is accessible to the system. If, during a polling event, the bit has been set but that drive has not had a bit set during a relatively long period of time, the system maintains the drive accessible to the system unless the drive sets the bit during a subsequent predetermined wait period, after which the system sets the flagdisk access inhibitor flag and places the drive in the inaccessible condition.