HP STORAGEWORKS XP24000 User Manual

HP S to r age W or ks XP2 4000/XP20000 V olume S ec ur it y Us er's Gui de Abstract This doc ument de scr ibes and pr o vi des instru ctions f or conf igur ing and perfor ming V olume Secur ity operati ons on the HP sto rage s y stem . P art number : T5 214 -96 0 7 4 Sixth editi on: June 2009
Legal and notice information Â© Cop yr ight 2008- 2009 Hew lett-P ack ard De velopment C ompan y , L .P . Conf idential co mputer softw are . V alid li cense fr om HP r equired f or posse ssion , use or cop ying . Consis tent with F AR 12 .211 and 12 .212 , C ommerc ial C omputer S oftware , Co mputer Softw are Doc umentatio n, and T ec hnical Data for C ommer cial It ems are li censed to the U .S . Go vernme nt under vendor's s tandard comme rc ial lice nse. The inf ormatio n contained her ein is subj ect to change w ithout noti ce. T he only w arr anties f or HP produc ts and servi ces are s et forth in the e xpres s warr anty statemen ts accompany ing suc h produc ts and service s. Nothing her ein should be cons trued as constituting an additi onal warr anty . HP shall not be liable fo r technical or edit orial e rro rs or omissi ons contained her ein . Acknowledgments Export Requirements Y ou may not e xport or re-export this doc ument or an y copy or adaptati on in vi olation of e xport law s or regulati ons. Witho ut limiting the for egoing , this document ma y not be e xported, r e -exported , transf err ed or dow nloaded to or w ithin (or to a national r esiden t of) countri es under U .S . economic e mbargo , including C uba, Ir an, North K or ea, Sudan , and S yr ia. T his list is subj ect to change . This docume nt may not be exported, r e -exported , transfer red , or dow nloaded to perso ns or entities listed on the U .S . D epartment of C ommer ce Denied P ersons List , Entity List of pr olifer ation concern o r on an y U .S . T reasury Department Desi gnated Nationals ex clu sion list , or to parties dir ectly o r indirectl y inv olv ed in the dev elopment or pr oduction o f nuclear , chemi cal, bi ological wea pons, or in missile tec hnolog y progr ams as spec ified in the U . S. Export Adminis tratio n Regulations (15 CFR 7 44). Rev ision History Description Date Edition This editi on applies t o micr ocode v ersion 6 0 -01-31-00/00 or later . June 200 7 F irst This editi on applies t o micr ocode v ersion 6 0 -01-6 8-00/00 or later . September 200 7 Second This editi on applies t o micr ocode v ersion 6 0 -0 2 - 25-00/00 or lat er . January 2008 Thir d This editi on applies t o micr ocode v ersion 6 0 -0 2 - 4 8-00/00 or later . Mar ch 2008 F ourth This editi on applies t o micr ocode v ersion 6 0 -04-04 -00/00 or later . December 2008 F ifth This editi on applies t o micr ocode v ersion 6 0 -05-00-00/00 or later . June 2009 Si xth
C on ten ts 1 Ov ervi e w of V olume Sec ur ity ............................................................... 7 Ove r v ie w ................................................................................................................................... 7 T er minolog y ............................................................................................................................... 7 2 Abou t V olume Sec ur ity Operati ons ....................................................... 9 Ove r v ie w of V olume Secur ity F unctio ns .......................................................................................... 9 Pr otecting V olume s fr om I/O Operati ons at Mainframe Hosts ........................................................... 9 Enabling Only the Spec ifi ed Hosts to Access V olume s ............................................................... 9 P ort -Le ve l Sec ur ity ............................................................................................................... 10 P ort -Le ve l Secur ity Implement ation ......................................................................................... 10 Pr ohibiting All Hosts fr om Acce ssing V olumes ......................................................................... 11 Pr otecting V olumes fro m Err oneous Copy Operati ons .............................................................. 12 W arnings Regar ding V olume Sec ur ity .......................................................................................... 12 Supported V olume Emulation T y pes ............................................................................................. 13 Max imum P o ssible Number of Gr oups ......................................................................................... 14 Max imum P ossible Number of Hosts and V olumes ........................................................................ 14 3 Using the V olume Sec ur it y GUI .......................................................... 15 The V olume Sec urity Windo w ..................................................................................................... 15 Sec urity Gro up T r ee ................................................................................................................. 16 Hosts T able .............................................................................................................................. 18 LDEVs T able ............................................................................................................................ 19 The A dd/Change Sec urity Gr oup Dialog Bo x ............................................................................... 20 The Add/Change Host Grou p Dialog Box ................................................................................... 23 The Add/Change LDEV Gr oup Dialog Box .................................................................................. 25 The Add/Change Host Dialog Bo x ............................................................................................. 27 The Select LD EV Dialog Box ....................................................................................................... 29 The Select P ort Dialog Box ......................................................................................................... 30 The Specify Sec urity Gr oup Dialog Bo x ....................................................................................... 32 The Host to Sec urity Gro up Dialog Box ........................................................................................ 33 The Ho st to LDEV Dialog Bo x ...................................................................................................... 34 Host Gr oup to Sec urity Gr oup Dialog Box .................................................................................... 35 The Hos t Grou p to P or t Dialog Bo x .............................................................................................. 36 The LDEV to Secur ity Group Dialog Bo x ....................................................................................... 37 The LDEV to Ho st Dialog Bo x ...................................................................................................... 38 The LDEV Gr oup to Secur ity Gr oup Dialog Box ............................................................................. 40 The Err or Detail Dialog Bo x ........................................................................................................ 41 4 P erf orming V olume Sec ur it y Oper ati ons ............................................... 43 La unching V olume Sec urity ......................................................................................................... 43 Vi ew ing Sec ur ity Se ttings ........................................................................................................... 43 Locating V olumes in a Spec ified Sec urity Group ..................................................................... 44 Locating Sec ur ity Group s that Contain a Spec if ied Host ........................................................... 44 Locating V olumes in a Sec urity Gr oup that Contains a Spec if ied Hos t ........................................ 44 XP2 4000/XP20000 V olume Secur ity User's Gui de 3
Locating P orts through Whic h Hosts Can Access V olumes ........................................................ 45 Locating S ecur ity Grou ps that Contain a S pecif ied V olume ....................................................... 45 Locating Ho sts in a Secur ity Grou p that Contains a Spec if ied V olume ........................................ 46 Locating Sec ur ity Group s that Contain a Spec if ied Host Gr oup ................................................. 46 Locating Sec ur ity Group s that Contain a Spec if ied LDEV Gr oup ................................................ 47 L imiting Host Access .................................................................................................................. 47 Cr eating a Hos t Group ....................................................................................................... 47 Regis ter ing Hosts in a Host Gr oup ........................................................................................ 48 Regis ter ing P orts in a Host Grou p ......................................................................................... 49 Cr eating an LDEV Grou p ..................................................................................................... 50 Regis ter ing V olumes in an LD EV Gr oup ................................................................................. 51 Cr eating a Sec urity Grou p for Use As an Acces s Group .......................................................... 52 Regis ter ing a Host Gr oup and an LDEV Gro up in a Secur ity Gro up ........................................... 53 Pr ohibiting Host Access ............................................................................................................. 53 Cr eating an LDEV Grou p ..................................................................................................... 53 Regis ter ing V olumes in an LD EV Gr oup ................................................................................. 54 Cr eating a Sec urity Grou p for Use As a P ool Gr oup ............................................................... 55 Regis ter ing an LDEV Gr oup in a Secur ity Gr oup ..................................................................... 56 Pr otecting V olumes fr om C opy Oper atio ns .................................................................................... 57 Disabling V olume Sec urity .......................................................................................................... 58 E diting Secur ity Gr oup s ............................................................................................................. 59 Unr egister ing a Host Grou p ................................................................................................. 59 Unr egister ing an LDEV Grou p .............................................................................................. 59 Re naming Sec urity Group s .................................................................................................. 60 Deleting Secur ity Group s ..................................................................................................... 61 E diting Host Grou ps .................................................................................................................. 61 Regis ter ing Hosts to be Attac hed to the St orage S y stem ........................................................... 61 Deleting Hosts fr om Host Group s .......................................................................................... 62 Deleting P orts fr om Host Gr oups ........................................................................................... 63 Re naming Host Grou ps ....................................................................................................... 64 Deleting Hos t Gr oups ......................................................................................................... 65 E diting LDEV Gr oups ................................................................................................................. 65 Deleting V olume s fr om LDEV Grou ps ..................................................................................... 65 Re naming LD EV Gr oups ...................................................................................................... 66 Deleting LDEV Group s ........................................................................................................ 67 5 T r ouble shooting ............................................................................... 69 T rouble shooting V olume Sec urity ................................................................................................. 69 Calling HP T echni cal Support ..................................................................................................... 69 6 Support and O ther R eso ur ces ............................................................ 71 Re lated Documen tation .............................................................................................................. 71 Con v entions f or Stor age Capac ity V alues ..................................................................................... 71 HP T echni cal Support ................................................................................................................ 71 Subs cr iption Servi ce .................................................................................................................. 72 HP W ebsites ............................................................................................................................ 72 Doc umentatio n F eedback ........................................................................................................... 72 A A cr ony ms and Abbr e v iati ons ............................................................. 73 Inde x ................................................................................................. 75 4
F igur es Sec urity Example 1 ................................................................................................. 10 1 Sec urity Example 2 ................................................................................................. 11 2 Sec urity Example 3 ................................................................................................. 12 3 The V olume Sec urity W indow ................................................................................... 16 4 Sec urity Grou p T ree ............................................................................................... 17 5 Hosts T able ............................................................................................................ 19 6 LDEV table ............................................................................................................. 20 7 The Add/C hange Secur ity Group Dialog Bo x ............................................................. 21 8 The A dd/Change Host Gr ou p Dialog Bo x .................................................................. 24 9 The A dd/Change LDEV Gr oup Dialog Bo x ................................................................. 26 10 The A dd/Change Hos t Dialog Bo x ............................................................................ 27 11 The Select LDEV Dialog Bo x ..................................................................................... 29 12 The Select P or t Dialog Bo x ....................................................................................... 31 13 The S pecify Sec ur ity Gr oup Dialog Bo x ...................................................................... 32 14 The Host to Secur ity Gr oup Dialog Box ...................................................................... 33 15 The Hos t to LD EV Dialog Bo x .................................................................................... 35 16 The Host Gr oup to Sec ur ity Gro up Dialog Bo x ............................................................ 36 17 The Hos t Group to P ort Dialog Bo x ............................................................................ 37 18 The LDEV to Sec urity Gro up Dialog Bo x ..................................................................... 38 19 The LDEV to Host Dialog Bo x .................................................................................... 39 20 The LDEV Grou p to Sec urity Grou p Dialog Box ........................................................... 41 21 The Err or Detail Dialog Bo x ...................................................................................... 42 2 2 XP2 4000/XP20000 V olume Secur ity User's Gui de 5
T able s Ac r ony ms and Abbr ev iati ons .................................................................................... 73 1 6
1 Ov er vie w of V olum e Sec ur it y Unless o therwise s pecif ied , the ter m stor age s ys tem in this guide r ef ers to the f ollo wing disk ar ra y s: â¢ HP Sto rage W orks XP2 4000 Disk Arr a y â¢ HP Sto rage W orks XP20000 Disk Ar ra y â¢ HP Sto rage W orks XP12000 Disk Ar ra y â¢ HP Sto rage W orks XP10000 Disk Ar ra y The G UI illustr ations in this gui de wer e c reat ed using a Windo w s compute r with the Int ernet Explor er br ow ser . Actual w indo ws ma y differ depending o n the operating s y stem and br o w ser used . GUI conten ts also vary w ith licensed pr ogr am pr oducts , stor age s yst em models, and f irm w are v ersi ons. Ov erv ie w V olume Sec ur ity pr otec ts data in your HP stor age s y stem fr om I/O ope rati ons performed at mainframe hos ts. Sec ur it y can be applied t o logical v olumes so that spec if ied mainfr ame ho sts ar e unable to r ead fr om and wr ite to the s pecif ied logi cal volume s. V olume Sec urity also ena bles yo u to pr ev ent data on logi cal volumes f r om being acc iden tally o ve rwr itten by er r oneous local or r emote cop y oper ations . V olume Secur ity can be used in conj unctio n with the V olume Sec ur ity P ort Option . T his optional pr ogram is u sed to spec ify stor age s ys tem ports thr ough whi ch ho sts can access logi cal volume s. Using V olume Sec ur ity you can manipulate up to 64 hosts and 6 5,2 80 logical v olumes f or one s tor age s ys tem. V olume Sec ur ity also enables y ou to c reate u p to 64 sec ur ity group s, 64 ho st gr oups, and 64 V olume Gr oups f or one stor age s y stem . V olume Secur ity oper ations ar e perfor med using the lice nsed HP Sto rage W orks XP Re mote W eb Cons ole softwar e . The R emote W eb Cons ole softwar e comm unicates dir ectl y w ith the stor age s ys tem v ia a local-ar ea networ k (L AN). Remote W eb Conso le display s detailed V olume Sec ur ity informati on and allo ws y ou to conf igur e and perf orm V olume Sec urity oper ations f or the mainfr ame s ys tems data stor ed on the stor age s ys tem . F or further det ails, see the HP Stor age W orks XP2 4000/XP20000 R emote W eb Console Us er âs Guide . T o apply port-lev el sec urity , y ou must ins tall the V olume Secur ity P or t Option . Bef or e installing this pr ogram , ensur e that V olume Secur ity is alread y installed . F or details o n the installation pr ocedur e , see the HP St orage W orks XP2 4000/XP20000 R emote W eb Console U ser âs Gui de . T ermin olog y Ther e ar e a fe w not es regar ding ter minolog y that user s should be aw ar e of w hen using this manual: â¢ In the st orage s ys tem doc umentati on, logical v olumes ar e some times r efe rr ed to as logi cal dev i ces (or LD EVs). Als o , the stor age s y stem documen tation sometimes uses the te rm, LDEV sec urity to ref er to sec ur ity policy that v olume sec urity enable s you t o apply to logi cal vo lumes. â¢ In the Hitac hi T r ueCop y â¢ for Mainf rame U ser's Guide , pr imary volumes ar e ofte n re fer red to a s M- V OLs, or main vo lumes. A lso , secondary volumes ar e o ften re fer red to a s R- V OLs or r emote vo lumes. In the Hit achi Shado wImage â¢ fo r Mainfr ame User's Gui de , primary volume s are o ften XP2 4000/XP20000 V olume Secur ity User's Gui de 7
r efer r ed to as S - V OLs, or sour ce v olumes . Secondary volumes ar e often r e ferr ed to a s T- V OLs, or tar get vo lumes. Ove r v iew o f V olume S ecur ity 8
2 About V olum e Sec ur it y Operations Ov erv ie w of V olume Sec ur it y F uncti ons The V olume Sec ur ity feature pr ot ects data in y our stor age s ys tem fr om I/O oper ati ons perfor med at mainfr ame hos ts. V olume Sec urity enables y ou to a pply sec ur ity to volumes s o that the spec ifi ed mainfr ame hos ts w ill be unable t o r ead fr om and w r ite to the s pec ified v olumes . V olume Secur ity also enables y ou to pr e ven t data on v olumes fr om be ing ov erwr itten b y err oneous cop y oper ations . V olume Secur ity can be used in conj unction w ith an opti onal pr ogram V olume Sec urity P ort Option . This optional pr ogr am can be us ed to spec ify sto rage sy stem por ts v ia w hic h hos ts can access volumes . In the stor age s y stem documen tation , v olumes are sometimes ref err ed to as logi cal dev i ces (or LDEVs ). Also , the st orage s y stem doc ument ation some times uses the t erm LDEV sec ur ity to re fer to s ecur ity polic y that V olume S ecur ity enables y ou to appl y to v olumes. Pr o tecting V olumes f r om I/O Oper ati ons at Mainf r ame Hos ts V olume Secur ity enables y ou to pr otec t volume s fr om unauthor i z ed acces ses b y mainfr ame hosts . T o pr otect v olumes f rom una uthor i z ed accesse s, y ou mus t cr eate sec ur ity group s and then r egister mainfr ame ho sts and/or v olumes in sec ur ity gr oups . Sec urity gr oup s ar e clas sifi ed into acce ss gr oups or pool gr oups . T o allo w some (but not all) mainf rame h osts to acces s volume s, y ou mus t clas sify the sec urity gr oup as an acce ss gr oup . T o prohib it all mainfr ame hosts f ro m access v olumes, y ou m ust clas sify the secur ity gr oup as a pool gr oup . Enabling Onl y the Spec ifi ed Hosts t o Acces s V olumes T o allow onl y some mainframe hosts in y our netw ork to access v olumes, you must r egister the mainfr ame hos ts and the v olumes in an acce ss gr oup . F or e x ample , if y ou r egister tw o hosts ( h ost_A and ho st_B ) and two v olumes ( v ol_C and v ol_D ) in an access gr oup , onl y the two ho sts w ill be able to access vo l_C and vol_D . No othe r hosts w ill able to acce ss vo l_C and vol_D . If mainfr ame hos ts are r egiste red in an acce ss gr oup , the hosts w ill be able t o access v olumes in the same access grou p, but w ill be unable to access other volumes . F or e xample , if y ou r egist er tw o ho sts ( host_A and host_B) and tw o v olumes ( vol_C and vol_D) in an access group , the tw o h osts can acce ss vo l_C and vol_D and canno t access other v olumes . T o r egister hosts in an access grou p, yo u m ust cr eate a ho st group , regis ter the hos ts in the ho st group , and then r egister the ho st gr oup in the desir ed acces s gr oup . T o regist er vo lumes in an acces s gr oup , y ou must c r eate an LDEV gr oup , r egister the v olumes in the LDEV gr oup , and then r egiste r the LDEV gr oup in the desir ed acce ss gr oup . Any access gr oup can only contain one host gr oup and one LDEV gr oup . In F igure 1 , si x mainf rame hosts are at tached to a stor age s y stem and two access gr oups are cr eated. Her e, the f ollo w ing sec urity settings ar e applied: â¢ The v olumes lde v1 and lde v2 are acces sible only f r om host1, ho st2 , and hos t3 because the tw o vo lumes and the thr ee hosts ar e r egister ed in the same acces s gro up . XP2 4000/XP20000 V olume Secur ity User's Gui de 9
â¢ The v olume lde v4 is accessible onl y fr om hos t4 because lde v4 and hos t4 are r egist ered in the same acces s grou p . â¢ The v olume lde v5 does not belong t o any acce ss gr oups . F or this r eason , hosts in acce ss gr oups cannot acces s ldev5. lde v5 is only acce ssible fr om ho st5 and host6 , w hic h ar e not r egister ed in access gr oup s. Figur e 1 Security Example 1 P or t-Le v el Sec ur ity Usuall y , hosts ar e connected t o two or mor e ports v ia cables and ha ve acce ss to v olumes v ia these ports. In the sec ur ity ex ample in F igur e 1 , hos ts in access gr oups can acce ss vo lumes v ia ev ery port to w hich the h osts ar e connected . Note , how e ver , that V olume S ecur ity P ort Option enables you to pro hibit hosts fr om accessing volume s v ia spec ifi ed ports. F or e x ample , if a host named host1 is connected t o two ports port1 and port2, y ou can per mit the hos t to acce ss v olumes v i a port1 and pro hibit the h ost f r om acces sing vo lumes v ia port2 . P or t-Le v el Sec ur ity Implement ation T o implement such por t-lev el sec urity, f irst y ou mu st deter mine ports via whic h hosts can access vo lumes, and then y ou mus t regis ter the ports in host gr oup s. F or e x ample , if yo u regis ter host1 and por t1 in the same ho st gr oup named hg1 and then r egister hg1 in an access gr oup , host1 can acces s volume v ia port1 bu t cannot access v olumes v ia port2. In F igur e 2 , the fo llow ing sec ur ity settings are a pplied: â¢ The h osts hos t1 , host2 , and ho st3 can access the v olumes lde v1 and lde v2 vi a port1, port2 , and port3 . How e ver , the hosts cannot acce ss the vo lumes vi a other ports. â¢ The ho st host4 can acces s the v olume ldev4 v ia port4. How e ver , the hos t cannot access the volume v ia other ports. About V olume Sec urity Oper ations 10
Figur e 2 Security Example 2 If no ports ar e regis ter ed in a host gr oup , ho sts in the hos t grou p can access v olumes v ia ports to whi ch the ho sts ar e connected . This man ual uses the te rm port-level security, w hich is a s ecur ity polic y for enabling h osts to acce ss vo lumes only v ia po rts registe red in ho st gr oups and th us pr ohibiting hos ts to access the v olumes v ia other ports. CA UTION: Bef or e y ou appl y sec urity , y ou should co nfir m wha t hosts ar e perf or ming I/O oper ati ons on v olumes in access gr o ups . If any ho sts perf or m I/O oper ati ons on vo lumes in access gr ou ps tha t the hos ts do not bel ong to , y ou w ill need to st op the I/O ope ra tions bef or e y ou app ly sec ur ity . Fo r ex ampl e, if yo u attemp t to app ly sec ur ity settings illu str ated in F igur e 2 , an e rr or occ urs an d the attem pt fails if hos t4 and hos t5 ar e perf ormin g I/O oper atio ns on lde v1 . T o apply t he sec urity setting s, y ou w ill need to ensur e th at hos t4 and hos t5 ar e not perf or ming I/O oper ati ons on lde v1 . Pr ohib iting All Hos ts fr om Acces sing V olumes T o pre vent all the mainf r ame hosts f rom acce ssing v olumes, y ou mu st r egister the v olumes in a pool gr oup (Note that y ou do not need t o regis ter hos ts in pool gro ups). F or e xam ple, if y ou r egist er two XP2 4000/XP20000 V olume Secur ity User's Gui de 11
vo lumes ( v ol_A and v ol_B ) in a pool gr oup , all the mainf rame hosts connec ted to y our storage sy stem w ill be unable to access v ol_A and v ol_B . T o registe r volume s in a pool gro up , yo u must c reat e an LDEV gr oup , r egister the v olumes in the LDEV gr oup , and then r egiste r the LDEV gro up in the desir ed pool gr oup . An y pool gr oup can onl y contain o ne LDEV gro up . In F igur e 3 , a pool gr ou p is cr eated . V olumes in this pool gr oup (that is , lde v7 , ldev8 , and lde v9) ar e inaccessible f ro m all the hosts: Figur e 3 Security Example 3 Pr otec ting V olumes f r om Er r oneou s Cop y Oper ati ons When st orage s y stem cop y so ft w are (T rueCop y f or Mainfr ame , Univ ers al Repli cator fo r Mainfr ame, Shado wImage for Mainf rame , and HP S tor age W orks XP f or F lashCop y Mir ro ring S oftwar e or XP for F lashCop y Mir ro ring V2 So ftwar e) is used to perf orm cop y oper ations , data w ill be ov erwr itten onto the secondary vo lumes (that is, the cop y destinati on volume s) . If a vo lume containing important data is spec ifi ed as a secondary vo lume (that is, the cop y destinatio n volume) b y mistak e , stor age s y stem copy s oftwar e oper ations can o v erwr ite important data on the v olume and y ou could suffe r loss of important data . V olume Secur ity enables y ou to a vo id suc h loss of dat a. If a v olume contains dat a that should not be o verw ritten , y ou can pre v ent the vo lume fr om being u sed as a secondary vo lume (that is, the cop y destinati on vo lume) . Secondary vo lumes (that is, cop y destinati on volume s) are o ften r efer red t o as r emote v olumes or R -V OLs in the Hitac hi T rueCop y â¢ for Mainf rame U ser's Guide . A lso , secondary vo lumes ar e re fer red to as tar get v olumes or T - V OLs in the Hitachi Shado wImage â¢ f or Mainfr ame User's Gui de . W arning s R egar ding V olume Sec ur it y Do not appl y sec urity to v olumes on w hich an y job is r unning. If y ou appl y sec ur ity to such a v olume , the job w ill pos sibly end abn ormall y . About V olume Sec urity Oper ations 12
When appl y ing sec urity , mak e sure that y our s ecur ity settings ar e corr ect . If incorr ec t secur ity settings ar e made, the s y stem w ill be diff ic ult or impos sible to contr ol . If the CPU o f a mainfr ame host is u pgraded after y ou appl y sec ur ity settings, y ou mus t ex ec ute the s ys tem command D M=CP U at the mainfr ame host to obt ain the latest inf ormati on about the ho st . Ne xt, y ou mu st use the lat est inf ormatio n to update hos t infor mation in the A dd/Change Host di alog bo x (for det ails, see â T he Add/Change Ho st Dialog Bo x â on page 27) . If y ou do not update ho st inf ormatio n, the s y stem w ill be impos sible to contr ol . â¢ If you ar e using storage s ystem cop y software (T rueCopy f or M ainframe , Universal R eplicator for Mainframe, Shado wImage for Mainframe, and XP for F lashCopy Mirr oring or XP for F lashCopy Mirror ing V2) : W hen y ou use V olume Sec urity to mak e sec ur it y settings , yo u must r egiste r the primary v olume and the seco ndar y v olume (that is, the copy source volume and the copy destinati on vo lume) in the same LDEV gr oup . F or details on h ow t o regis ter vo lumes in LDEV gr oups , see â Regis ter ing V olume s in an LDEV Gro up â on page 51 or â Regis ter ing V olume s in an LDEV Gro up â on page 54. If y ou appl y sec ur ity to a pr imar y v olume (that is , cop y sour ce v olume) of a pair o f stor age s y stem copy s oftwar e , some or all mainf rame ho sts might beco me unable to r ead fr om and wr ite to the primary v olume . How e ver , the copy oper ation w ill be perf ormed nor mally ; data w ill be copied fr om the pr imary volume to the seco ndar y v olume. If y ou r egister a primary v olume or secondary v olume in a s ecur ity gr oup and then mak e a setting fo r pr e venting the v olume from being used a s a secondary v olume , this setting w ill take effect after the pair is split . Mainfr ame hos ts cannot access v olumes in pool gr oup s. If a v olume in a pool gr oup is spec if ied as a pr imary volume , the pair cr eatio n command might f ail. In the Hitac hi T r ueCop y â¢ for Mainf rame U ser's Guide , pr imary volumes (that is , copy s our ce vo lumes) ar e o ften r efe rr ed to as M- V OLs or main v olumes . A lso , secondary v olumes (that is, copy destinati on vo lumes) ar e often r efer r ed to as R -V OLs or r emote v olumes . In the Hitachi Shado wImage â¢ f or Mainfr ame User's Gui de , pr imary v olumes (that is , cop y source vo lumes) are often ref err ed to a s S- VOLs or sour ce v olumes . Also , secondary volumes (that is, cop y destinati on vo lumes) ar e often r efer r ed to as T -V OLs or tar get v olumes . â¢ If you ar e using Virtual L VI/LUN (VLL) volumes: If y ou appl y sec urity to a VLL v olume , y ou will be unable to change the VLL settings on the v olume . T o change the VLL settings, y ou mu st u se V olume Sec urity to disa ble sec urity on the VLL v olume. F or details on ho w to disable s ecur ity , see â Disabling V olume Sec urity â on page 58. â¢ If you ar e using HP Storage W or ks XP for Compatible P arallel Access V olumes Soft ware: If y ou appl y secur ity to a P arallel A ccess V olumes base v olume , the sec ur it y settings w ill also a pply to the corr es ponding alias v olume . â¢ Remo ving secured v olumes: If you appl y sec ur it y to a v olume , yo u will be una ble to re mov e the vo lume. T o r emov e the v olume, y ou m ust disable s ecur ity on the vo lume. F or details on ho w to disable sec ur ity , see â Disabling V olume Sec urity â on page 58. â¢ Remo ving PCBs w ith secured ports: If port-lev el sec urity is appli ed to yo ur stor age s yst em, y ou cannot r emo ve the P CBs (pr inted c ir cuit boar ds) that inc lude sec ured ports . T o r emo ve P CBs that include s ecur ed ports, y ou mu st use V olume Sec ur ity P ort Option t o disable sec urity on the ports . F or details on h ow t o disable sec urity , see â Deleting P orts fr om Hos t Gro ups â on page 63. Supported V olume Emulati on T y pes â¢ V olume emulation types (that is, dev ice emulation types) : V olume Secur ity supports the follo w ing vo lume emulation ty pes: â¢ 3 3 80 -3, 33 80- 3A, 3 3 80 -3B, 3 3 80 -3C â¢ 3 3 90- 3, 3 3 9 0 - 3A, 3 3 90-3B, 3 3 90- 3C, 3 3 9 0 -3R XP2 4000/XP20000 V olume Secur ity User's Gui de 13
â¢ 3 3 90-9 , 3 3 90-9A, 33 90 -9B, 3 3 9 0 -9C â¢ 3 3 90-L, 3 3 9 0 -L A, 3 3 90 -LB, 3 39 0 -L C â¢ 3 3 90-M, 3 3 90 -MA, 3 3 90-MB, 3 3 90-MC â¢ PCB types: V olume Secur ity supports the follo w ing P CB types: â¢ E S CON or A CONAR C â¢ FICON or FIB AR C Max im um P ossible Number o f Gr oups V olume Secur ity enables y ou to c r eate up to 12 8 sec ur ity grou ps per stor age s y stem , and up to 64 sec urity gr oups pe r LDK C. Sec ur ity group s are c lassif ied int o access gr oups and poo l grou ps: â¢ One access gr oup can co ntain onl y one host gr oup and o ne LDEV gro up . One host gr oup can contain u p to 3 2 hos ts. One LDEV gr oup can co ntain up to 6 5,2 80 volume s. â¢ One pool gr oup can cont ain only one LDEV gr ou p. One LDEV gr ou p can contain up to 6 5,2 80 vo lumes. The max imum po ssible number o f host gr oup s is 12 8 per stor age s ys tem , and 64 per LDK C. The max imum po ssible number o f LDEV gro ups is 12 8 per st orage s y stem , and 64 per LDK C. Max im um P ossible Number o f Hos ts and V olumes V olume Sec urity allo ws y ou to manipulate up t o 12 8 hos ts for st orage s y stem , and up to 6 4 hosts per LDK C. V olume Sec ur ity enables y ou to manipulate up to 13 0,5 60 v olumes per s tor age sy ste m, and up to 6 5,2 80 volume s per LDK C. About V olume Sec urity Oper ations 14
3 Using th e V olum e Sec ur it y GUI This c hapter e xplains V olume Sec urity w indow and di alog bo xes . T he V olume Sec ur it y W indo w The V olume Sec ur ity windo w ( F igur e 4 ) appears w hen y ou start V olume Sec urity . This w indo w is the starting point f or all the V olume Sec urity oper ations . T o start the V olume Sec ur ity softwar e: 1. Log o n to the disk arr a y to open the R emote W eb Cons ole main w indow . F or details , see the HP Sto rage W orks XP2 4000/XP20000 Remo te W eb C onsole Us er âs Guide . 2. Cli ck Go, Mainframe Connection, and then selec t V olume Security on the menu bar of the Re mote W eb Console main w indo w . â¢ T o make sec ur ity settings and apply the s ettings, y ou mus t use a us er account that has the w rit e permis sion (F or ex ample , the A dministr ator accoun t) . If y ou u se a us er account that doe s not ha ve the wr ite per missio n, y ou w ill be able to v ie w sec urity settings but w ill ne ither be able to mak e sec urity settings n or apply s ecur ity settings. â¢ T o set sec urity using V olume Sec urity , y ou must mak e sur e that R emote W eb Console is in Modify mode . F or detailed inf ormati on on ho w to do this, s ee the HP Stor age W or ks XP2 4 000/XP20000 Re mote W eb Console Us er âs Guide . F igur e 4 show s the V olume Secur ity w indo w when a Secur ity Group belonging to an LD K C is select ed. XP2 4000/XP20000 V olume Secur ity User's Gui de 15
Figur e 4 The V olume Security Windo w Description Item Displa ys the sec ur ity , hos t, and LDEV gr oup s assigned to eac h LDK C def ined on the stor age s yst em. F or det ails see â Sec urity Gr oup T r ee â on page 16. Security Group tree Displa ys the type , model , SEQNUMBER , L ogical P ar tition (LP AR) and ve ndor of each host . F or details , see â Hos ts T able â on page 18. Hosts table Allo ws y ou to se lect the desir ed command unit(s) av ailable in each gr oup . Whe n you select a C U image, the ta ble below sh ow s a list of v olumes in the selec ted CU image CU list Sho ws the LDEV , emulation , and attribut e infor mation assi gned to each logi cal dev ice on the stor age s ys tem. F or de tails, see â LDEVs T able â on page 19. LDEVs table Applie s the reque sted XRC s etting changes to the s torage s y stem . An y change made to a vo lume appears in blue italic s until yo u clic k Appl y . Apply Discar ds the req uested c hanges with out apply ing them to the s tor age sy stem . A confir m- ation me ssage appears to allo w y ou to cancel the r eques ted operati on(s). Click OK on the confir mation mes sage to cancel the r equest ed operati on(s) , or c lick Cancel to k eep (but not st art) the reques ted operati on(s). Cancel Sec urity Gr oup T r ee F igur e 5 sho ws the S ecur ity Gro up tr ee wher e y ou can selec t the LDK C (logical disk con tro ller), and then ch oose a sec ur ity group , host gr oup , or LDEV gr oup r esiding o n that LDK C. When y ou double-clic k LDK C: 00 or LDK C:01, y ou can displa y a list of sec ur ity group s, hos t gr oups, and LD EV grou ps in that LDK C. Once you hav e selected the LDCK you can c hoose fr om these opti ons: Using the V olume Secur ity GUI 16
â¢ Double-clic k Sec urity Gr oup and a list of s ecur ity gr oups appear s. T hen select a ho st gr oup or LDEV gr oup in that sec ur ity group . â¢ Double-clic k Host Gr oup and a lis t of host gr ou ps appears . Then s elect a spec if ic hos t gr oup . â¢ Double-clic k LDEV Gro up . The tr ee v ie w sho ws the ho st gr oup and/or LDEV gr oup r egiste red in the sec urity gr oup . Figur e 5 Security Group T ree Description Icon Indicate s an access gr oup wh ose v olumes can be used a s secondary volumes (i .e ., copy destinati on volume s) for cop y operati ons. Indicate s an access gr oup wh ose v olumes cannot be us ed as secondary volume s (i.e ., cop y destinati on volume s) for cop y operati ons. Indicate s a pool grou p who se volume s can be used as seco ndar y v olumes (i .e., cop y des- tination v olumes) f or copy oper atio ns. Indicate s a pool grou p who se volume s cannot be used as s econdary volumes (i .e ., copy destinati on volume s) for cop y operati ons. XP2 4000/XP20000 V olume Secur ity User's Gui de 17
Description Icon Indicate s that the secur ity settings in this sec urity gr oup ar e cur re ntly disabled . If y ou enable the sec urity settings , this secur ity gro up is clas sified a s an access gr oup . Also , v olumes in this sec urity gr oup can be used a s secondary volumes (i .e ., copy de stination v olumes) f or copy ope rati ons. Indicate s that the secur ity settings in this sec urity gr oup ar e cur re ntly disabled . If y ou enable the sec urity settings , this secur ity gro up will be c lassif ied as an acces s grou p. A lso , volume s in this sec urity gr oup ar e unav ailable for u se as secondary volume s (i.e ., cop y destinatio n vo lumes) for cop y oper ations. Indicate s that the secur ity settings in this sec urity gr oup ar e cur re ntly disabled . If y ou enable the sec urity settings , this secur ity gro up will be c lassif ied as a pool gr oup . Als o, v olumes in this sec urity gr oup w ill be av ailable for u se as secondary vo lumes (i .e., cop y destinati on vo lumes) for cop y oper ations. Indicate s that the secur ity settings in this sec urity gr oup ar e cur re ntly disabled . If y ou enable the sec urity settings , this secur ity gro up will be c lassif ied as a pool gr oup . Als o, v olumes in this sec urity gr oup w ill be unav ailable for u se as secondary vo lumes (i .e., cop y destinati on vo lumes) for cop y oper ations. T o make c hanges to a gr oup , r ight-cli ck a gr oup or the gro up entry in the tr ee, then select Add/Change fr om the pop-up men u . Changes y ou mak e in the r esulting dialog bo x appear in blue itali cs until y ou cli ck Appl y or Cancel . NO TE: If y ou mak e V olume Secur ity settings on o ne LDK C and th en mo ve on t o anoth er LDK C, c lick Appl y or Cancel bef or e mo v ing on to th e LDK C. Hos ts T able This table pr o vi des inf ormati on abou t ho sts. The table con tents depend on the selectio n in the Security Group tree , as e xplained belo w : â¢ If y ou select Subs ystem , LDK C:00 , LDK C: 01 , Security Group , Host Group , or LDEV Gr oup , the table sho ws inf ormati on about all the h osts . â¢ If y ou select a s ecur ity gro up , the table sho ws inf ormati on about all the h osts that belong t o the select ed sec urity gr oup . â¢ If y ou selec t a ho st gr oup , the ta ble sho ws informati on abou t all the hos ts that belong to the selec ted hos t grou p . â¢ If y ou select an LDEV gr ou p, the t able displa ys nothing . Using the V olume Secur ity GUI 18
Figur e 6 Hosts T able Description Column A sequen tial number as soci ated w ith a host (or c hannel ext ender). No. T ype and model number o f a host (or a c hannel e xtender). T ype/Mod el Node ID of a hos t (or a channel e xtender ) . SEQNUMBER The logi cal partition number of a h ost . LP AR The ho st ve ndor . V endors inc lude FJT (F ujitsu) , IBM, HT C (Hit achi), and CNT(Ex) . If CNT(Ex) appears , the table r ow indi cates the type , model numbe r , and node ID of a channe l extender . V endor If y ou mak e any c hange to a hos t, the ho st appears in blue it alics . When y ou cli ck Appl y or Cancel , the hos t is res tor ed to its or iginal typef ace and color . The R eports Displa y dialog bo xes in R emote W eb Cons ole also sho w info rmation a bout hos ts. F or details , see the HP Stor age W orks XP2 4000/XP20000 Remo te W eb C onsole Us er âs Guide . LDEVs T able F igur e 7 pr ov ide s infor mation abo ut volume s. T he infor mation a vailable depends o n the selecti on in the Sec urity Gr oup tr ee: â¢ If y ou select Subsystem, Sec urity Group, Host Gr oup , or LDEV Group , the table pr ov ides informati on about all the v olumes that ar e accessible f r om the mainfr ame hosts . â¢ If y ou select a s ecur ity gro up , the table pr ov ide s infor mation abo ut all the volume s that belong to the selec ted sec urity gr oup . â¢ If y ou select an LDEV gr ou p, the t able pr ov ides inf or mation about all the v olumes that be long to the selec ted LDEV gr oup . â¢ If y ou select a h ost gr oup , the table dis play s nothing . XP2 4000/XP20000 V olume Secur ity User's Gui de 19
Figur e 7 LDEV table Description Column The v olume ID (in hex adec imal fr om 00 to FF) NO TE: A vo lume ID ending in # (f or e xam ple , 00#) indica tes , the v olume is an e xter nal vo lume. LDEV The em ulation type o f the volume Emulation The v olume statu s: â¢ An ast erisk (*) den otes a secondary vo lume (copy des tination) fo r USP V/VM copy s oftwar e. â¢ A plus s ymbol ( ) de notes that one or mor e L U paths ar e assigned t o the volume . Attribute T he Add/C hange Sec ur it y Gr ou p Dialog Bo x The Add/Change Sec urity Gr oup dialog bo x ( Fi gure 8 ) a ppears w hen y ou right-cli ck a s ecur ity gr ou p or the Security Group entry in the tree v ie w of the V olume Sec ur ity windo w ( F igur e 4 ) and then se lect Add/Change fr om the pop-up men u . This di alog box e nables y ou to: â¢ cr eate a sec ur ity grou p and clas sify the secur ity grou p as an access gr oup o r a pool gro up (sees â Cr eating a Sec urity Gr oup fo r Use As an Acce ss Gr oup â on page 52 and â Cr eating a Sec urity Gr oup fo r Use As a P ool Gr oup â on page 55) â¢ pr ev ent data in v olumes f rom be ing o verw ritten b y copy ope rati ons (see â Pr otecting V olumes fr om C opy Ope rati ons â on page 57) â¢ disable sec ur ity settings (see â Disabling V olume Sec ur ity â on page 58) â¢ r ename sec urity gr oups (s ee â Renaming Sec ur ity Grou ps â on page 60) â¢ delete sec ur ity grou ps (see â Deleting Sec ur ity Grou ps â on page 61) Using the V olume Secur ity GUI 20
Figur e 8 The Add/Change Security Group Dialog Box Description Item Indicate s the selected LDK C number . LDK C Desc ripti ve inf ormati on about the sec ur ity groups in the LDK C. â¢ Security indicates w hether the sec urity settings in the s ecur ity grou p are Enabled o r Disabled. CA UTION: It is possibl e that sec ur ity settings ar e disab led ev en if Ena bled is displa y ed. If t he Sta tus is Acces s and the sec ur ity grou p cont ains neithe r a host n or an LDEV gr oup , sec ur ity setting s in the sec urity gr ou p are dis abled unco nditionall y . â¢ Group Status indi cates whe ther the sec urity gr oup is an Acces s or a P ool gr oup . If A ccess appears , the sec urity gro up is an access gr oup; v olumes in the gr oup can be acces sed only by h osts r egister ed in the same gr oup . If P ool appears, the s ecur ity group is a poo l grou p; vo lumes in the gro up cannot be access ed by an y hosts . â¢ T -V OL/R -V OL indicat es whethe r volumes in the s ecur ity grou p can be used as secondary vo lumes (i.e ., cop y destinati on volume). Enable indicate s the volumes can be u sed as second- ary volumes . Disable indicat es the volume s cannot be used as s econdary volumes . NO TE: Secondary v olumes (tha t is, cop y destina tion v olumes) ar e oft en r ef err ed t o as r emot e volume s or R - V OLs in the Hita chi T rueCo py â¢ fo r Mainfr ame Use r's Guide . Also , seco ndary volume s ar e re fer r ed to a s tar get v olumes or T - V OLs in the Hita chi Shado wImage â¢ fo r Mainfr ame Use r's Guide . Security Group List XP2 4000/XP20000 V olume Secur ity User's Gui de 21
Description Item When c reating a ne w sec urity gr oup , yo u enter the name of the s ecur ity group in this Enter Security Group te xt bo x. When re naming an ex isting secur ity gr oup , you select the sec ur ity gr oup in the Security Group List table and then ent er a new name . The f ollo wing con v entions appl y to sec urity gr oup names: â¢ Up to ei ght char acter s can be used . â¢ Char acter s are cas e -sensitiv e . â¢ The f ollo wing c harac ters cannot be u sed: \ , / : ; * ? " < > | â¢ The f irst c harac ter and the last c harac ter mus t not be a space . Enter Secur- ity Group Select t o make no c hanges, ena ble, o r disable sec urity settings . The def ault is Enable . â¢ No Change does not change the s ecur ity status of the sec ur ity group s selected in the Security Group List t able. F or ex ample, if y ou se lect a sec urity-enabled gr oup and a sec ur ity-disabled gr oup in the table , Disable disables sec ur ity settings in both gr oups, bu t No Chang e does not change the c urr ent sec ur ity status for bo th grou ps (The f ormer r emains sec ur ity-enabled and the latter r emains sec urity-disabled). â¢ Enable enables the sec ur ity settings that are made in the sec ur ity group s selected in the Se- curity Group List ta ble. CA UTION: It is possibl e that sec ur ity settings ar e disab led ev en if Enable is sel ected . If Access is selec ted in the Group S tatus box (s ee belo w) and the sec ur ity gro up cont ains neith er a hos t gro up nor an LDEV gr o up , sec urity setting s in the sec ur ity grou p ar e disabled unconditi onall y . â¢ Disable disables the sec ur ity settings that are made in the sec ur ity group s selected in the Se- curity Group List ta ble. Security Sets a selec ted sec urity gr oup as acces s grou ps or pool gr oups . The def ault is Access. â¢ No Change does not change the gr oup s tatus of the sec ur ity group s selected in the Security Group List t able. F or ex ample, if y ou se lect one access gr oup and o ne pool gro up, Acces s changes the tw o gr oups into acce ss gr oups, bu t No Chang e does not c hange the two gr oups (The f ormer r emains an acces s grou p and the latter remains a poo l grou p) . â¢ Access spec ifi es the select ed secur ity gro ups as access gr ou ps. V olumes in an access gr oup can only be acce ssed b y hosts r egister ed in the same acces s grou p but cannot be access ed by o ther hosts . â¢ P ool spec if ies the selec ted sec urity gr oups as pool gr oup s. V olumes in a pool gr oup cannot be accessed b y an y hosts . Group Status Spec ifi es whe ther volume s in the secur ity grou p can be used a secondary v olumes (i .e., cop y destinati on volume s) . The def ault is Enable . â¢ No Change does not c hange the secondary volume se ttings of the sec urity gr oups selec ted in the Sec urity Group List table . F or ex ample, if volume s in one of the selec ted sec urity group s ar e u sable as copy de stinations , bu t vo lumes in the other s ecur ity gr oup are unusable , Enable mak es v olumes in both gr oup s u sable as destinations . Ho we v er , No Change does not change vo lumes in both gr oups (The f orme r remains u sable , and the latter re mains unusable). â¢ Enable makes v olumes in the selec ted sec urity gr oups usa ble as secondary volume s (copy destinati ons) . â¢ Disable makes vo lumes in the se lected s ecur ity gr oups un usable as secondary v olumes (cop y destinati ons) . T -V OL/R - V OL Enter the name of a ne w sec urity gr oup and c lick A dd . Then the ne w sec urity gr oup is added to the Sec urity Gr oup L ist table . Add Using the V olume Secur ity GUI 2 2
Description Item When se ttings of the selected s ecur ity grou ps are c hanged, c lic k Change to make the c hanges appear in the Sec urity Gr oup L ist table . Change Applie s settings in the Add/Change S ecur ity Grou p dialog bo x to the V olume Sec ur ity windo w , and then clo ses the dialog bo x . CA UTION: Cli cking OK ap plies t he settings t o the V olume Secur ity w indo w , but does n ot appl y the setting s to the st or age s ys tem . T o a pply t he sec urity setting s to the su bs ys tem , yo u mus t contin ue to cli ck Appl y in the V olume Sec urity w indo w until the y ap pear in the dialog bo x. OK Discar ds settings in the Add/C hange Secur ity Gro up dialog bo x and clos es the dialog bo x Cancel T he Add/C hange Hos t Gr oup Dialog Bo x The A dd/Change Hos t Grou p dialog bo x ( F igur e 9 ) appears w hen y ou r ight-clic k a hos t gro up or the Host Group entry in the tree v ie w of the V olume Sec ur ity windo w ( F igur e 4 ) and then selec t Add/Change fr om the pop-up men u . This di alog box e nables y ou to: â¢ cr eate ho st gr oups (see â Cr eating a Ho st Gr oup â on page 47) â¢ r ename host gr ou ps (see â R enaming Host Gr oup s â on page 64) â¢ delete ho st gr oups (s ee â Deleting Host Gr oup s â on page 65) XP2 4000/XP20000 V olume Secur ity User's Gui de 2 3
Figur e 9 The Add/Change Host Group Dialog Bo x Description Item Indicate s the selected LDK C number . LDK C A list of ho st gr oups in the LDK C. Host Gr oup L ist When c reating a ne w host gr oup , y ou ent er the name of the h ost gr oup in this Enter Ho st Group te xt bo x. When r enaming an e x isting host gr oup , y ou select the h ost gr oup in the Host Group L ist table and then en ter a new name . The f ollo wing con v entions appl y to hos t grou p names: â¢ Up to ei ght char acter s can be used . â¢ Char acter s are cas e -sensitiv e . â¢ The f ollo wing c harac ters cannot be u sed: \ , / : ; * ? " < > | â¢ The f irst c harac ter and the last c harac ter mus t not be a space . Enter Ho st Gro up Enter the name of a ne w hos t gro up, c lic k Add , and the new sec ur ity group is added to the Host Gr oup L ist table . Add When se ttings of the selected h ost gr oups ar e changed , cli ck Change t o make the c hanges appear in the Host Gr ou p List ta ble. Change Using the V olume Secur ity GUI 2 4
Description Item This butto n applies settings in the A dd/Change Host Gr ou p dialog box t o the V olume Sec urity w indow , and then closes the A dd/Change Hos t Grou p dialog box . CA UTION: The OK b utton a pplies t he settings t o the V olume Sec urity w indo w , but does not appl y the s ettings to t he stor age sy stem . T o appl y the setting s to the su bs ys tem , yo u mu st contin ue to cli ck Appl y in the V olume Secur ity w indo w . OK Discar ds settings in the Add/C hange Host Gr oup dialog bo x and clo ses the dialog bo x Cancel T he Add/C hange LDEV Gr oup Di alog Bo x The A dd/Change LDEV Gr oup di alog box ( F i gure 10 ) a ppears whe n you r igh t -cli ck an LDEV gr oup or the LDEV Gr oup entry in the tree v ie w of the V olume Sec ur ity windo w ( F igur e 4 ) and then selec t Add/Change fr om the pop-up men u . This di alog box e nables y ou to: â¢ cr eate LDEV gr oup s (see â Cr eating an LDEV Gr oup â on page 50 or â Cr eating an LDEV Gro up â on page 53) â¢ r ename LDEV gr oups (see â R enaming LDEV Gr oups â on page 66) â¢ delete LDEV gr oup s (see â Deleting LDEV Gr oups â on page 67) XP2 4000/XP20000 V olume Secur ity User's Gui de 2 5
Figur e 10 The Add/Change LDEV Group Dialog Bo x Description Item Indicate s the number of the selec ted LDK C. LDK C A list of LDEV gr oup s in the LDK C. LDEV Gr oup L ist When c reating a ne w LDEV gr oup , yo u enter the name of the LDEV gr oup in this Enter LDEV Group te xt bo x . W hen r enaming an ex isting LDE V gr oup , y ou selec t the LD EV gr oup in the LDEV Group L ist table and then enter a ne w name . The f ollo wing con v entions appl y to LDEV gr oup names: â¢ Up to ei ght char acter s can be used . â¢ Char acter s are cas e -sensitiv e . â¢ The f ollo wing c harac ters cannot be u sed: \ , / : ; * ? " < > | â¢ The f irst c harac ter and the last c harac ter mus t not be a space . Enter LDEV Gr oup Enter the name of a ne w LDEV gr oup and c lick A dd. T hen the new LDE V grou p is added to the LDEV Gr oups L ist table . Add When se ttings of the selected LDE V grou ps are c hanged, c lic k Change to mak e the changes appear in the LDEV Gr oups L ist table . Change Using the V olume Secur ity GUI 2 6
Description Item This butto n applies settings in the A dd/Change LDEV Gr oup dialog bo x to the V olume Sec urity w indow , and then closes the A dd/Change LDEV Gr oup dialog bo x . CA UTION: The OK b utton a pplies t he settings t o the V olume Sec urity w indo w , but does not appl y the s ettings to t he stor age sy stem . T o appl y the setting s to the su bs ys tem , yo u mu st contin ue to cli ck Appl y in the V olume Secur ity w indo w . OK Discar ds settings in the Add/C hange LDEV Grou p dialog bo x and clos es the dialog bo x Cancel T he Add/C hange Hos t Dialog Bo x The A dd/Change Hos t dialog bo x ( F igur e 11 ) appears w hen y ou ri ght-clic k a host gr ou p in the tree v ie w of the V olume Secur ity windo w ( F i gure 4 ) and s elect Specify and then Host fr om the pop-up menu . This di alog box e nables y ou to: â¢ r egister ho sts attached to the s tor age sy ste m in host gr oup s (see â Regis ter ing Hosts in a Hos t Gro up â on page 48) â¢ r egister ho sts unattached to the s tor age sy ste m in host gr oup s (see â Regis ter ing Hosts to be A ttached to the S tor age S yst em â on page 61) â¢ delete ho sts fr om ho st gr oups (see â Dele ting Hosts fr om Ho st Gr oups â on page 62) Figur e 11 The Add/Change Host Dialog Bo x Description Item Indicate s number of the selec ted LDK C. LDK C XP2 4000/XP20000 V olume Secur ity User's Gui de 2 7
Description Item Spec ify the name of the host gr ou p in whic h hosts w ill be r egister ed. Host Group List Host inf ormati on. â¢ No. A s equential n umber assoc iated w ith a hos t. NO TE: Ea ch ta ble r o w usuall y sho ws inf orm ation a bout a ho st . How e ve r , if a hos t is attac hed to the s tor age s y stem v ia a c hannel e xtend er , the table r ow sho ws info rma tion abo ut the c hannel e xtend er . â¢ T ype/Mod el indicate s the type and the model number o f a host (or a c hannel ext ender). The ty pe appears on the left of the sla sh (/) . The model n umber appears on the r ight of the slash . The fo llow ing e xplains the meaning of icons in this column: The ho st is r egister ed in the cur re nt host gr oup ( whi ch is displa yed abo ve the t able) , and is attached to the stor age s yst em vi a a cable. The ho st is r egister ed in the cur re nt host gr oup , and is not attached t o the stor age sy stem . The ho st is r egister ed in another hos t gro up (though the host can be r egiste red in the c urr ent ho st gro up). The ho st is attached to the s tor age sy stem v ia a cable . The ho st is r egister ed in another hos t gro up (though the host can be r egiste red in the c urr ent ho st gro up). The ho st is not attac hed to the stor age sy ste m. The ho st is not r egister ed in an y host gr oup . T he host is attached to the s torage s y stem v ia a cable . No icon â¢ SEQNUMBER indicate s the node ID of a host (o r a channel e xtender ) . â¢ LP AR indi cates the logical partition n umber of a hos t. L ogical partitions ar e v irtual sy stems cr eated as a r esult of s ectioning a com puter's memory into separ ate units . â¢ V endor indicate s the vendor o f a host . This column can dis play FJT (F ujitsu), I BM, and HT C (HP). This column can also displa y CNT(Ex); if CNT(Ex) is display ed , the T ype/Model column indicate s the type and the model number of a c hannel e xtender , and the SEQNUMBER column indicate s the node ID of the channel e xtender . Host table Host gr oup inf ormati on. â¢ T ype/Mod e indicate s the type and the model number o f a host (or a c hannel ext ender). â¢ SEQNUMBER indicate s the node ID of a host (o r a channel e xtender ) . â¢ LP AR indi cates the logical partition n umber of a hos t. â¢ V endor indicate s the vendor o f a host . V endo rs include FJT (F ujitsu), IBM, HT C (Hitac hi) and CNT(Ex) for c hannel e xtender . Add/Change Hosts table Using the V olume Secur ity GUI 2 8
Description Item Applie s settings in the Add/Change Ho st dialog bo x to the V olume Secur ity windo w , and then clo ses the dialog bo x . CA UTION: Cli cking OK ap plies t he settings t o the V olume Secur ity w indo w , but does n ot appl y the setting s to the st or age s ys tem . T o a pply t he sec urity setting s to the s tor age s y stem , y ou mu st contin ue to cli ck Appl y in the V olume Secur ity w indo w until the y ap pear in the dialog bo x . OK Discar ds settings in the Add/C hange Host dialog bo x and clo ses the dialog bo x Cancel T he Selec t LDEV Di alog Bo x The S elect LDEV dialog bo x ( F igur e 12 ) appear s when y ou r ight-cli ck an LDEV gr ou p in the tree v ie w of the V olume Sec urity w indo w ( F igur e 4 ) , select Specify and then LDEV fr om the pop-up menu . This di alog box e nables y ou to: â¢ r egister volumes (LD EVs) in an LDEV group (see â R egister ing V olumes in an LDEV Group â on page 51 or â R egister ing V olumes in an LDEV Gro up â on page 54) â¢ delete v olumes f rom an LDE V grou p (see â Deleting V olumes fr om LDEV Gr oup s â on page 65) Figur e 12 The Select LDEV Dialog Box Description Item Indicate s the number of the selec ted LDK C LDK C Spec ifi es the name of the LDEV in w hic h the volumes ar e r egister ed. LDEV Group Selects the n umber of the logical CU image . T he two table s below this lis t pro v ide in- for mation abo ut the volume s in the selected CU image . CU XP2 4000/XP20000 V olume Secur ity User's Gui de 2 9
Description Item Lis ts volume s regist ered in the LDEV gr oup . One ta ble ro w indicate s one volume . â¢ The LDE V column indicates LDEV n umbers. NO TE: If a vo lume ID is displa yed w ith a poun d sign (f or ex am ple , 00#) , the v olume is an e xter nal vo lume. â¢ The Emulation column indi cates emulati on types o f volumes . If an aster isk (*) appears in the cell on the r ight , the volume is a s econdary volume (that is, cop y destinati on vo lume for cop y operati ons) or an Shado wImage for Mainf rame r eserv ed volume . If a plus s ymbol a ppears in the cell on the r ight , one or mor e L U paths are a ssigned to the v olume. Registered in LDE V Group table Lis ts volume s that not regis ter ed in the LDEV grou ps. One ta ble ro w indicat es one volume . â¢ LDEV displa ys the LDEV n umbers. â¢ The Emulation column indi cates emulati on types o f volumes . â¢ Select All selects all vo lumes in the table . Not Registered in LDEV Group t able Regis ters v olumes in the LDEV gr oup . Select v olumes in Not Register ed in LDEV group and then cli ck this button t o mov e the selected v olumes to R egistered in LDEV gr oup . Regist Deletes v olumes fr om the LDEV gr oup . Selec t volume s in Registered in LDEV gr oup and then cli ck this button t o mov e the selected v olumes to Not r egistered in LDEV gr oup . Not Regist Applie s settings in the Select LDEV di alog box t o the V olume Sec ur ity windo w and clos es dialog bo x. CA UTION: Cli cking OK ap plies t he settings t o the V olume Secur ity w indo w , but does n ot appl y the s ettings to t he stor age sy stem . T o appl y the sec ur ity settings to th e subs y stem , y ou mu st con tinue to c lic k Apply in the V olume Sec urity w indo w until the y appear in t he dialog bo x . OK Discar ds settings in the Selec t LDEV dialog bo x and close s the box Cancel T he Selec t P ort Dialog Bo x T o use the Select P ort dialog bo x , y ou mus t ensur e that V olume Sec ur ity P ort Opti on is alr eady installed . The S elect P ort dialog bo x ( F igur e 13 ) appears w hen y ou ri ght-clic k a host gr ou p in the tree v ie w of the V olume Secur ity windo w ( F i gure 4 ) and then s elect Specify -> P ort fro m the pop-up menu . T he Select P or t dialog bo x enable s you t o regis ter ports in the spec ifi ed host gr oup (s ee â Regis ter ing P or ts in a Host Gr ou p â on page 49). Using the V olume Secur ity GUI 30
Figur e 13 The Select P ort Dialog Box Description Item Indicate s the number of the selec ted LDK C LDK C Spec ifi es a host gr ou p in whic h ports will be r egiste red . Host Group Sho ws the r egister ed ports in the host gr oup: â¢ LDEV displa ys the LDEV n umbers. NO TE: When t he dialog bo x ope ns for t he fir st time , the P ort list does not disp lay ports. T his means that h osts in th e host gr ou p can access v olumes v ia e v ery port displ ay ed in the P or t list in th e Unregistered port bo x. â¢ Select All selects all ports in the P ort list . Registered P ort table Lis ts ports that not regis ter ed. â¢ The P or t list lists po rts that are not r egister ed in the hos t grou p. W hen the dialog bo x is displa yed f or the firs t time, the P ort list show s all ports on the disk subs y stem. â¢ Select All selects all ports in the P ort list . Unregistered P ort table Regis ters ports in the hos t grou p. If y ou se lect ports in the Unregistered port table and then cli ck this button , the select ed ports are mo ved to the P ort list under Registered port . Regist Deletes r egister ed ports fr om the hos t gro up . If you s elect a port in the Registered port table and then c lic k this button, the se lected port(s) are mo v ed to Unregistered port table . Not Regist XP2 4000/XP20000 V olume Secur ity User's Gui de 31
Description Item Applie s settings in the Select P ort dialog bo x to the V olume Secur ity windo w , and then clo ses the Selec t P ort dialog bo x. CA UTION: Cli cking OK ap plies t he settings t o the V olume Secur ity w indo w , but does n ot appl y the se ttings to th e stor age s y stem . T o appl y the sec ur it y setting s to the su bs ys tem , y ou mu st contin ue to cli ck Appl y in the V olume Secur ity win dow un til the y appear in the di alog bo x. OK Discar ds settings in the Selec t P ort dialog bo x , and then clos es the dialog bo x. Cancel T he Spec ify Sec ur ity Gr ou p Dialog Bo x The Spec ify Sec urity Gro up dialog box ( F igur e 14 ) appears when y ou ri ght-clic k an LD K C or a sec urity gr oup in the tr ee vi ew o f the V olume Secur ity windo w ( F igur e 4 ), select Specify and then Sec urity Group fr om the pop-up men u . This di alog box e nables y ou to r egister a ho st gr oup and an LDEV gr oup in a s ecur ity grou p (see â Regis ter ing a Host Gr oup and an LDEV Gr oup in a S ecur ity Gro up â on page 53) . Figur e 14 The Specify Sec urity Group Dialog Bo x Description Item Indicate s the number of the selec ted LDK C. LDK C Spec ifi es the sec urity gr oup in w hich y ou w ant to r egister a hos t gro up and an LDEV gr oup . Select Sec urity Group Spec ifi es a host gr ou p that you w ant to r egister in the s ecur ity group . Host Group Spec ifi es an LDEV gr oup that y ou want t o regist er in the sec urity gr oup . LDEV Group Applie s settings in the Spec ify Secur ity Gro up dialog bo x to the V olume Secur ity w indow and c loses the di alog box . CA UTION: Cli cking OK ap plies t he settings t o the V olume Secur ity w indo w , but does n ot appl y the s ettings to t he stor age sy stem . T o appl y the sec ur ity settings to th e subs y stem , y ou mu st con tinue to c lic k Apply in the V olume Sec urity w indo w until the y a ppear in the di alog bo x. OK Using the V olume Secur ity GUI 3 2
Description Item Discar ds settings in the Spec ify Sec urity Gr oup dialog bo x and clo ses the dialog bo x. Cancel T he Hos t to Sec ur it y Gr o up Dialog Bo x The Ho st to Sec ur ity Group di alog box ( F igure 15 ) a ppears whe n you do e ither of the f ollo wing in the V olume Secur ity windo w ( F i gure 4 ): â¢ whe n you r igh t -cli ck a ho st fr om the uppe r-r ight t able and then selec t Host to Security Group fr om the pop-up menu . â¢ whe n you r igh t -cli ck an ite m in the tree v ie w and then se lect List -> Host to Security Group fro m the pop-up menu . The List -> Host t o Security G roup pop-up command does n ot display if y ou double-clic k a sec urity gr oup and then r ight-cli ck a ho st gr oup or LDEV gr oup f ro m immediatel y belo w the sec urity gr oup . This di alog box e nables y ou to spec ify a host and the n display s sec ur it y gr oups in w hic h the host is r egister ed (see â L ocating Sec urity Gr oups that C ontain a Spec if ied Hos t â on page 44) . Figur e 15 The Host to Security Group Dialog Bo x Description Item Indicate s the number of the selec ted LDK C. LDK C XP2 4000/XP20000 V olume Secur ity User's Gui de 3 3
Description Item Pr ov ides inf ormati on about a hos t, w her e the number gr oups , fr om left to r ight , indicate: â¢ First : T he T ype/Model the type and model n umber of a host (o r a channel e xtender ) . â¢ Second : The Node ID of a h ost (or a c hannel exte nder). â¢ Thir d : The L ogical P ar tition Number o f the host . â¢ Fourth : The v endor of the ho st . V endors inc lude: FJT (F ujitsu) , IBM, HT C (Hitachi), and CNT(Ex). If CNT(Ex) appears, the table r o w indicates the ty pe, mode l number , and node ID of a c hannel extende r . Host Spec ifi es a host gr ou p that you w ant to r egister in the s ecur ity group . Host Group Lis ts sec urity gr oups in w hich the s pecif ied hos t is regis tered . â¢ Security Group indicate s the name of a sec urity gr oup . â¢ Security indicates w hether the sec urity settings in the s ecur ity grou p are ena bled or disabled . â¢ Group Status indi cates whe ther the sec urity gr oup is an access gr oup or a pool gr ou p. â¢ T -V OL/R -V OL indicat es whethe r volumes in the s ecur ity grou p can be used as secondary vo lumes (i.e ., cop y destinati on volume). Enable indicate s the volumes can be u sed as secondary volume s. Disable indi cates the v olumes cannot be us ed as secondary volume s. Security Group table Clos es the dialog bo x. OK T he Hos t to LDEV Di alog Bo x The Ho st to LDEV dialog bo x ( F igur e 16 ) appear s when y ou do e ither of the f ollo wing in the V olume Sec urity w indo w ( F igur e 4 ): â¢ whe n you r igh t -cli ck a ho st fr om the uppe r-r ight t able and then selec t Host to LDEV fr om the pop- up menu . â¢ whe n you r igh t -cli ck an ite m in the tree v ie w and then se lect List -> Host to LDE V fro m the pop-up menu . T he List -> Host to LDEV pop-up command does not displa y if y ou double-clic k a sec urity gr oup and then right-cli ck a host grou p or LD EV group fr om immedi ately below the sec urity gr oup . This dialog bo x enable s you to spec ify a hos t and then display s volumes in the sec ur ity gr oup in whi ch the hos t is regist er ed (see â Locating V olumes in a S ecur ity Grou p that Cont ains a Spec ifi ed Host â on page 44) . Using the V olume Secur ity GUI 34
Figur e 16 The Host to LDEV Dialog Bo x Description Item Indicate s the number of the selec ted LDK C LDK C Pr ov ides inf ormati on about a hos t, w her e the number gr oups , fr om left to r ight , indicate: â¢ First : T he T ype/Model the type and model n umber of a host (o r a channel e xtender ) . â¢ Second : The Node ID of a h ost (or a c hannel exte nder). â¢ Thir d : The L ogical P ar tition Number o f the host . â¢ Fourth : The v endor of the ho st . V endors inc lude FJT (F ujitsu) , IBM, HT C (Hitachi), and CNT(Ex). If CNT(Ex) appears, the table r o w indicates the ty pe, mode l number , and node ID of a channe l extender . Host Spec ifi es a CU image number . CU Lis ts host gr oups in w hic h the spec ifi ed CU is regis ter ed. â¢ LDEV indicate s the name of an LDEV . A volume ID ending in # (for e x ample , 00#) indic - ates the v olume is an ext ernal v olume. â¢ Emulatio n indicates the em ulation types o f volumes . LDEV table Clos es the dialog bo x. OK Hos t Gr ou p to S ec ur ity Gr oup Di alog Bo x The Ho st Gr oup to Sec ur ity Grou p ( F igur e 17 ) appears w hen y ou ri ght-clic k an item in the tr ee vi ew of the V olume Sec urity w indo w ( F igur e 4 ) and then select L ist -> Host Group to Security Group fr om the pop-up menu . The List -> Host Group to Security Group pop-up co mmand does not display if y ou double -clic k a sec urity gr oup and then r ight-cli ck a h ost gr oup or LDEV gr ou p fr om immediatel y belo w the sec urity gr oup . This di alog box e nables y ou to spec ify a host gr ou p and then display s sec ur ity group s in whi ch the spec ifi ed host gr ou p is regis ter ed (see â Locating S ecur ity Gro ups that Co ntain a Spec if ied Host Gr oup â on page 46) . XP2 4000/XP20000 V olume Secur ity User's Gui de 3 5
Figur e 17 The Host Group to Security Gr oup Dialog Box Description Item Indicate s the number of the selec ted LDK C LDK C Spec ifi es a host gr ou p. Host Group Lis ts infor mation abou t the secur ity grou ps in whi ch the spec if ied host gr ou p is regist ered . â¢ Security Group indicate s the name of a sec urity gr oup . â¢ Security indicates w hether the sec urity settings in the s ecur ity grou p are ena bled or disabled . â¢ Group Status indi cates whe ther the sec urity gr oup is an access gr oup or a pool gr oup . â¢ T -V OL/R -V OL indicat es whethe r volumes in the s ecur ity grou p can be used as sec - ondary volumes (i .e ., copy de stination v olume). Enable indicates the vo lumes can be used as s econdary volumes . Disable indicates the v olumes cannot be us ed as secondary volume s. Security Group table Clos es the dialog bo x. OK T he Hos t Gr ou p to P ort Dialog Bo x T o use the Ho st Group to P ort di alog bo x , y ou mu st ensur e that V olume S ecur ity P ort Opti on is alread y installed . The Ho st Gr oup to P ort dialog bo x ( F igur e 18 ) appears w hen y ou r ight-clic k an item in the tr ee v ie w of the V olume Sec urity w indo w ( F igur e 4 ) and then select L ist -> Host Group to P ort fr om the pop-up menu . T he Host Gr oup to P ort dialog box enable s you to f ind ports via w hic h hosts can access v olumes (see â L ocating P or ts thr ough Whi ch Hos ts Can Acces s V olumes â on page 45). Using the V olume Secur ity GUI 3 6
Figur e 18 The Host Group to P ort Dialog Box Description Item Indicate s the number of the selec ted LDK C. LDK C Pr ov ides inf ormati on about a hos t gro up, w her e the number gr oups , fr om left to r ight , indicate: â¢ First : T he T ype/Model the type and model n umber of a host (o r a channel e xtender ) . â¢ Second : The Node ID of a h ost (or a c hannel exte nder). â¢ Thir d : The L ogical P ar tition Number o f the host . â¢ Fourth : The v endor of the ho st . V endors inc lude FJT (F ujitsu) , IBM, HT C (Hitachi), and CNT(Ex). If CNT(Ex) appears, the table r o w indicates the ty pe, mode l number , and node ID of a c hannel extende r . Host Group Lis ts ports that are a vailable and r egister ed . P ort table Clos es the dialog bo x. OK T he LDEV to S ec ur ity Gr oup Di alog Bo x The LDEV t o Secur ity Gr oup dialog bo x ( F igur e 19 ) appear s when y ou do e ither of the fo llow ing in the V olume Secur ity windo w ( F i gure 4 ): â¢ whe n you r igh t -cli ck a v olume fr om the lo w er r ight table and then s elect LDEV t o Security G roup fr om the pop-up men u . â¢ whe n you r igh t -cli ck an ite m in the tree v ie w and then se lect List -> LDEV to Security Group fr om the pop-up menu . The List -> LDEV to Security Group pop-up command does not displa y if y ou double-clic k a sec urity gr oup and then r ight-cli ck a ho st gr oup or LDEV gr oup f ro m immediatel y belo w the sec urity gr oup . This dialog box ena bles y ou to spec ify a volume and then dis play s sec urity gr oups in w hic h the volume is r egister ed (see â L ocating Sec urity Gr oups that C ontain a Spec if ied V olume â on page 45) . XP2 4000/XP20000 V olume Secur ity User's Gui de 3 7
Figur e 19 The LDEV to Security Group Dialog Bo x Description Item Indicate s the number of the selec ted LDK C. LDK C Spec ifi es a CU image number . CU Desc ribes the a vailable LDEVs: â¢ LDEV indicat es a number as signed to the LDEV . â¢ Emulatio n indicates the em ulation types o f the volume . NO TE: A vo lume ID ending in # (f or e xam ple , 00#) indica tes the v olume is an e xter nal vo lume. LDEV table Lis ts sec urity gr oups in w hich the s pecif ied v olume is regis ter ed: â¢ Security Group indicate s the name of a sec urity gr oup . â¢ Security indicates w hether the sec urity settings in the s ecur ity grou p are ena bled or disabled . â¢ Group Status indi cates whe ther the sec urity gr oup is an access gr oup or a pool gr ou p. â¢ T -V OL/R -V OL indicat es whethe r volumes in the s ecur ity grou p can be used as second- ary volumes (i .e ., copy de stination v olume). Enabl e indicate s the volumes can be u sed as secondary vo lumes. Disable indicat es the volume s cannot be used as s econdary vo lumes. Security Group table Clos es the dialog bo x. OK T he LDEV to Ho st Di alog Bo x The LDEV t o Host dialog bo x ( F igur e 20 ) appear s when y ou do e ither of the f ollo wing in the V olume Sec urity w indo w ( F igur e 4 ): â¢ whe n you r igh t -cli ck a v olume fr om the lo w er r ight table and then s elect LDEV t o Host fr om the pop-up menu . Using the V olume Secur ity GUI 38
â¢ whe n you r igh t -cli ck an ite m in the tree v ie w and then se lect List -> LDEV t o Host fro m the pop-up menu . T he List ->LDEV t o Host pop-up command does not displa y if y ou double -cli ck a sec ur ity gr oup and then right-cli ck a host grou p or LD EV group fr om immedi ately below the sec urity gr oup . This dialog bo x enables you to spec ify a v olume and the n displa y s hos ts in the sec ur ity gr oup in whi ch the spec ifi ed vo lume is regist er ed (see â Locating Ho sts in a Sec urity Gr oup that C ontains a S pecif ied V olume â on page 46) . Figur e 20 The LDEV to Host Dialog Bo x Description Item Indicate s the number of the selec ted LDK C. LDK C Spec ifi es a CU image number . CU Desc ribes the a vailable LDEVs: â¢ LDEV indicate s a number assi gned to the LDEV . â¢ Emulatio n indicates the em ulation types o f the volume . NO TE: A vo lume ID ending in # (f or e xam ple , 00#) indica tes the v olume is an e xter nal vo lume. LDEV table XP2 4000/XP20000 V olume Secur ity User's Gui de 3 9
Description Item Lis ts hosts in the sec ur ity group in w hic h the spec ified v olume is r egister ed. â¢ No . A sequen tial number as soci ated w ith a host . NO TE: Ea ch ta ble r o w usuall y sho ws inf orm ation a bout a ho st . How e ve r , if a hos t is attac hed to the disk su bs ys tem v ia a ch annel e xtende r , the ta ble r o w sho ws info rma tion abo ut the c hannel e xtend er . â¢ T ype/Mod el indicate s the type and the model number o f a host (or a c hannel ext ender). The T ype appears o n the left of the slash (/). The Model number appears on the r ight o f the slash . Befor e the T ype/Model , an icon indi cates the r egistrati on status o f the host in thes e wa ys: â¢ SEQNUMBER indicate s the node ID of a host (o r a channel e xtender ) . â¢ LP AR indi cates the logical partition n umber of a hos t. L ogical partitions ar e v irtual sy stems cr eated as a r esult of s ectioning a com puter's memory into separ ate units . â¢ V endor indicate s the vendor o f a host . V endo rs include FJT (F ujitsu), IBM, HT C (Hitac hi) , and CNT(Ex). If CNT(Ex) appears, the T ype/Model column indicates the type and the model number o f a channel e xtender , and the SEQNUMBER column indicat es the node ID of the c hannel exte nder . Host table Clos es the dialog bo x. OK T he LDEV Gr oup to Sec ur it y Gr oup Dialog Bo x The LDEV Gr ou p to Sec urity Gr oup dialog bo x ( F igur e 21 ) appear s when y ou r ight-cli ck an ite m in the tr ee vi ew of the V olume Sec urity w indo w ( F igur e 4 ) and then s elect List -> LDE V Group to Security Group fr om the pop-up men u . NO TE: Ho we ve r , the L ist -> LDEV Group to Security Group po p-up command d oes not disp lay if y ou dou ble-clic k a secur ity gr oup an d then r igh t-cli ck a ho st gr oup o r LDEV gro up fr om immediatel y belo w the sec ur ity gro up . This dialog box ena bles y ou to spec ify an LDEV gr oup and then display s s ecur ity gr oups in w hic h the spec ifi ed LDEV gr oup is r egister ed (see â Locating S ecur ity Gro ups that Co ntain a Spec if ied LDEV Gr oup â on page 47) . Using the V olume Secur ity GUI 40
Figur e 21 The LDEV Gr oup to Security Group Dialog Box Description Item Indicate s the number of the selec ted LDK C. LDK C Spec ifi es an LDEV gr oup . LDEV Gr oup Lis ts infor mation abou t the secur ity grou ps in whi ch the spec if ied LDEV gr oup is r e - gister ed . â¢ Security Group indicate s the name of a sec urity gr oup . â¢ Security indicates w hether the sec urity settings in the s ecur ity grou p are ena bled or disabled . â¢ Group Status indi cates whe ther the sec urity gr oup is an Acces s or a P ool gr oup . â¢ T -V OL/R -V OL indicat es whethe r volumes in the s ecur ity grou p can be used as sec - ondary volumes (i .e ., copy de stination v olume). Enable indicates the v olumes can be used as s econdary volumes . Disable indicate s the volume s cannot be used as secondary volume s. Security Group table Clos es the dialog bo x. OK T he Err or Detail Di alog Bo x When y ou attempt t o apply sec ur ity in the V olume Sec ur ity windo w , an err or mi ght occ ur if hosts ar e perfor ming I/O oper ations (f or details , see the Caution in â P ort -Le ve l Secur ity Implementati on â on page 10) . The Er ro r Detail dialog bo x ( F igur e 2 2 ) enable s y ou to find h osts that ar e perfor ming I/O oper ations . F or instr uctio ns on ho w to r emov e err or s, see â T r oubleshooting V olume Sec ur ity â on page 69. XP2 4000/XP20000 V olume Secur ity User's Gui de 41
Figur e 22 T he Error Detail Dialog Bo x Description Item Lis ts the number of the ho st av ailable on the selec ted LDK C w hich ar e perfo rming I/O oper ations. Host Indicate s the number of the selec ted LDK C. LDK C Spec ifi es a Command U nit image and for ces the displa y of an y volumes o n whic h the host is pe rforming I/O oper atio ns and whic h belong to the spec if ied CU image . CU Pr ov ides inf ormati on about the selec ted CU . â¢ LDEV : T he availa ble LDEV numbers . â¢ Emulation : The em ulation type s of volume s. LDEV table Clos es the dialog bo x. OK Using the V olume Secur ity GUI 4 2
4 P er for ming V olume Sec urity O per ations This c hapter e xplains the f ollow ing V olume Sec urity oper ations: â¢ La unching V olume Sec urity (see L aunching V olume Sec ur it y , page 43) â¢ Vi ew ing Sec ur ity Settings (see V iew ing Sec ur ity Settings , page 43) â¢ Enabling onl y the spec ifi ed hosts to acce ss certain vo lumes, so that the o ther hosts canno t access the vo lumes (see L imiting Host A ccess , page 47) â¢ Pr ev enting all the ho sts to access v olumes (s ee Prohib iting Host A ccess , page 53). â¢ Pr ev enting data in v olumes f rom be ing o verw ritten b y copy ope rati ons (see Pr otecting V olumes fr om C opy Ope rati ons , page 57) â¢ Disabling sec ur ity (see Disabling V olume Sec urity , page 58listedr ef) L aunc hing V olume Sec ur ity This s ection de scr ibes ho w to st art the V olume Sec ur ity softwar e . If V olume Secur ity P ort Option is installed , the functi ons of the V olume Sec urity P ort Option pr ogr am w ill become usable w hen y ou start V olume Sec urity . T o start the V olume Sec ur ity softwar e: 1. Log o n to the Remo te W eb C onsole main w indo w . F or details , see the HP Sto rage W orks XP2 4000/XP20000 Remo te W eb C onsole Us er âs Guide . T o make sec ur ity settings and apply the s ettings, y ou mus t use a us er account that has the w rit e permis sion (F or ex ample , the Adminis trat or account) . If y ou use a user account that does not hav e the wr ite per missio n, y ou w ill be able to v ie w sec urity settings but w ill ne ither be able to mak e sec urity settings n or apply s ecur ity settings. 2. Cli ck Go, Mainframe Connection, and then V olume Security on the me nu bar o f the Remot e W eb Cons ole main w indow . The V olume Sec ur ity windo w appears (s ee F igur e 4 ) . T o set sec urity using V olume Sec urity , y ou must mak e sur e that R emote W eb Console is in Modify mode. F or detailed infor mation on ho w to do this , see the HP S torage W orks XP2 4000/XP20000 Remo te W eb C onsole Us er âs Guide . V ie w ing Sec ur it y Settings This s ection de scr ibes ho w to v ie w sec ur it y settings . â¢ Locating V olumes in a S pecif ied S ecur ity Gro up (see â Locating V olumes in a S pecif ied S ecur ity Gro up â on page 44) â¢ Locating S ecur ity Gro ups that Co ntain a Spec if ied Host (s ee â Locating S ecur ity Gro ups that Co ntain a Spec if ied Host â on page 44) â¢ Locating V olumes in a S ecur ity Grou p that Cont ains a Spec ifi ed Host (see â Locating V olumes in a S ecur ity Grou p that Cont ains a Spec ifi ed Host â on page 44) XP2 4000/XP20000 V olume Secur ity User's Gui de 4 3
â¢ Locating P or ts thr ough Whic h Hosts C an Acces s V olume s (see â Locating P or ts thr ough Whic h Hosts C an Acces s V olume s â on page 45) â¢ Locating S ecur ity Gro ups that Co ntain a Spec if ied V olume (see â Locating S ecur ity Gro ups that Co ntain a Spec if ied V olume â on page 45) â¢ Locating Ho sts in a Sec urity Gr oup that C ontains a S pecif ied V olume (see â Locating Ho sts in a Sec urity Gr oup that C ontains a S pecif ied V olume â on page 46) â¢ Locating S ecur ity Gro ups that Co ntain a Spec if ied Host Gr ou p (see â Locating S ecur ity Gro ups that Con tain a Spec ifi ed Host Gr oup â on page 46) â¢ Locating S ecur ity Gro ups that Co ntain a Spec if ied LDEV Gr oup (see â Locating S ecur ity Gro ups that Co ntain a Spec if ied LDEV Gr oup â on page 47) L ocating V olumes in a S pec if ied S ec urity Gr ou p T o s earc h a secur ity group f or volumes , select the secur ity grou p in the tr ee vi ew of the V olume S ecur ity w indow ( F igure 4 ) and then s ee the list of v olumes in the lo w er -ri ght table . L ocating Sec ur ity Gro ups that C ontain a S pec if ied Ho st T o specify a hos t and find the sec ur ity grou ps in whi ch the ho st is r egister ed , you can f ollo w either of the two procedur es belo w . F ollo w the fir st pr ocedure if the desired ho st is display ed in the upper -r ight table of the V olume Sec ur ity windo w ( F igur e 4 ). Follo w the seco nd procedur e if the desir ed ho st is not displa y ed in the upper -ri ght table . If the desir ed host is dis play ed in the upper -r ight table: 1. R ight-cli ck the hos t in the table . 2. F r om the pop-up menu , se lect List -> Host to Security G roup. The Host to Secur ity Gr oup di alog bo x appear s ( F igur e 15 ). T he dialog box dis play s the sec ur ity gr oups that y ou w ant . If the desir ed host is n ot display ed in the upper -r ight t able: 1. In the tr ee vi ew o f the V olume S ecur ity windo w ( F igur e 15 ), righ t -cli ck an it em ex cept f or a host gr oup or LDEV gr oup that a ppears immediatel y belo w a sec urity gr oup . 2. F r om the pop-up menu , se lect List -> Host to Security G roup. The Ho st to Sec ur ity Group di alog box a ppears ( â The Ho st to Sec ur ity Group Di alog Box â on page 33). 3. F r om the Host drop-do wn lis t, s elect the desir ed ho st . The t able lists the sec ur it y gr oups that y ou w ant . L ocating V olumes in a S ec urity Gr ou p that Con tains a Spec ifi ed Host If a s ecur ity gr oup is classif ied as an acce ss grou p, the secur ity gr oup contains both host and volumes . The procedur es belo w e nable y ou to spec ify a host and to f ind v olumes in the sec urity gr oup in w hic h the spec ifi ed host is r egist ered . F ollo w the first pr ocedur e if the desir ed host is display ed in the upper-r ight ta ble of the V olume Sec urity w indow ( F igur e 4 ). F ollo w the second pr ocedur e if the de sired host is n ot displa yed in the upper -r ight table . If the desir ed host is dis play ed in the upper -r ight table: 1. R ight-cli ck the hos t in the table . 2. F r om the pop-up menu , se lect List -> Host to LDEV. P erforming V olume Secur ity Oper ations 44
The Ho st to LDEV dialog bo x appear s ( F igur e 16 ) . The di alog box dis play s a list of v olumes . 3. R ight-cli ck an arr ow at the r ight end of the CU drop-do w n list , and then see how many C U image number s appear . â¢ If only o ne CU image number appear s, the table in the di alog box dis play s all the vo lumes that y ou want . â¢ If t w o o r mor e CU image number s a ppear , the table in the dialog box cur ren tly display s some of the v olumes that y ou w ant. S elect eac h CU image number to f ind vo lumes in the spec ifi ed CU image . If the desir ed host is n ot display ed in the upper -r ight t able: 1. In the tr ee vi ew o f the V olume S ecur ity windo w ( F igur e 4 ), righ t -cli ck an it em ex cept f or a host gr oup or LDEV gr oup that a ppears immediatel y belo w a sec urity gr oup . 2. F r om the pop-up menu , se lect List -> Host to LDEV. The Ho st to LDEV dialog bo x appear s ( F igur e 16 ) . 3. F r om the Host drop-do wn lis t, s elect the desir ed ho st . 4. R ight-cli ck an arr ow at the r ight end of the CU drop-do w n list , and then see how many C U image number s appear . â¢ If only o ne CU image number appear s, the table in the di alog box dis play s all the vo lumes that y ou want . â¢ If t w o o r mor e CU image number s a ppear , the table in the dialog box cur ren tly display s some of the v olumes that y ou w ant. S elect eac h CU image number to f ind vo lumes in the spec ifi ed CU image . L ocating P or ts thr ough Whi c h Hosts C an Acce ss V olumes T o find ports vi a whi ch a ho st can access v olumes , you m ust ensur e that V olume Sec urity P ort Option is alr eady installed . T o find ports vi a whi ch a ho st can access v olumes , follo w the pr ocedur e belo w . T o find ports vi a whi ch a ho st can access v olumes: 1. In the V olume Secur ity windo w ( F i gure 4 ), ri ght-clic k an item in the tr ee vi ew and the n select L ist -> Host Group to P or t fr om the pop-up me nu . The Ho st Gr oup to P ort dialog bo x appears ( F i gure 18 ). 2. Select a h ost gr oup f ro m the Host Group drop-do w n list . 3. Select a h ost fr om the Ho st dr op-dow n list . The P ort list displa ys ports v ia w hic h the spec ified h ost can acces s volume s. 4. Cli ck OK to clos e the Host Gr oup t o P or t dialog bo x . Y ou ar e r eturned to the V olume Sec urity w indo w . L ocating Sec ur ity Gro ups that C ontain a S pec if ied V olume T o specify a v olume and find the s ecur ity grou ps in whi ch the v olume is r egister ed , yo u can follo w either o f the two pr ocedur es belo w . F ollo w the fir st pr ocedure if the de sired v olume is displa y ed in the lo wer -r ight t able of the V olume Sec urity w indow ( F igure 4 ). F ollo w the second pr ocedur e if the desir ed vo lume is not displa yed in the lo w er -ri ght table . If the desir ed vo lume is display ed in the lo we r-r ight t able: 1. R ight-cli ck the v olume in the table . XP2 4000/XP20000 V olume Secur ity User's Gui de 4 5
2. F r om the pop-up menu , se lect List -> LDEV to Security Group. The LDEV t o Secur ity Gr oup dialog bo x appears ( F igure 19 ). The ta ble on the ri ght displa ys the sec urity gr oups that y ou w ant . If the desir ed vo lume is not displa yed in the lo w er -ri ght table: 1. In the tr ee vi ew o f the V olume S ecur ity windo w ( F igur e 4 ), righ t -cli ck an it em ex cept f or a host gr oup or LDEV gr oup that a ppears immediatel y belo w a sec urity gr oup . 2. F r om the pop-up menu , se lect List -> LDEV to Security Group. The LDEV t o Secur ity Gr oup dialog bo x appears ( F igure 19 ). 3. Select a C U image number fr om the CU drop-do w n list , and then select an LDE V number fr om the lo wer -le ft table. The t able on the ri ght lists the sec ur ity grou ps that yo u want . L ocating Hosts in a S ec ur it y Gr oup that C ont ains a Spec ified V olume If a s ecur ity gr oup is classif ied as an acce ss grou p, the secur ity gr oup contains both host and volumes . The procedur es belo w e nable y ou to specify a volume and to find ho sts in the sec urity gr oup in w hic h the spec ifi ed vo lume is regist er ed. F ollo w the fir st pr ocedure if the de sired v olume is displa y ed in the low er -r ight table o f the V olume Sec urity w indo w ( F igur e 4 ) . F ollo w the second pr ocedur e if the desir ed volume is n ot display ed in the lo wer -r ight t able. If the desir ed vo lume is display ed in the lo we r-r ight t able: 1. R ight-cli ck the v olume in the table . 2. F r om the pop-up menu , se lect List -> LDEV to Host. The LDEV t o Host dialog bo x appear s ( F igur e 20 ) . The t able on the r ight displa ys a lis t of hos ts. If the desir ed vo lume is not displa yed in the lo w er -ri ght table: 1. In the tr ee vi ew o f the V olume S ecur ity windo w ( F igur e 4 ), righ t -cli ck an it em ex cept f or a host gr oup or LDEV gr oup that a ppears immediatel y belo w a sec urity gr oup . 2. F r om the pop-up menu , se lect List -> LDEV to Host. The LDEV t o Host dialog bo x appear s ( F igur e 20 ) . 3. Select a C U image number fr om the CU drop-do w n list , and then select an LDE V number fr om the lo wer -le ft table. The t able on the ri ght lists the sec ur ity grou ps that yo u want . L ocating Sec ur ity Gro ups that C ontain a S pec if ied Ho st Gr ou p T o specify a hos t gro up and then f ind secur ity gr oups in w hic h the spec ified h ost gr oup is r egiste red , follo w the pr ocedur e belo w: 1. In the tr ee vi ew o f the V olume S ecur ity windo w ( F igur e 4 ), righ t -cli ck an it em ex cept f or a host gr oup or LDEV gr oup that a ppears immediatel y belo w a sec urity gr oup . 2. F r om the pop-up menu , se lect List -> Host Group to Security Group. The Ho st Gr oup to Sec ur ity Grou p dialog bo x appears ( F igur e 17 ). 3. F r om the Host Group drop-do w n list , select the de sired h ost Gr oup . The t able lists the sec ur it y gr oups that y ou w ant . P erforming V olume Secur ity Oper ations 46
L ocating Sec ur ity Gro ups that C ontain a S pec if ied LDEV Gr oup T o specify an LDEV gr oup and then find sec urity gr oups in whic h the spec ifi ed LDEV gr oup is r egister ed , follo w the pr ocedur e belo w: 1. In the tr ee vi ew o f the V olume S ecur ity windo w ( F igur e 4 ), righ t -cli ck an it em ex cept f or a host gr oup or LDEV gr oup that a ppears immediatel y belo w a sec urity gr oup . 2. F r om the pop-up menu , se lect List -> LDEV Group to Security Group. The LDEV Gr ou p to Sec urity Gr oup dialog bo x appear s ( F igur e 21 ) . 3. F r om the LDEV Group dr op-dow n list , selec t the desir ed LDEV Gro up . The t able lists the sec ur it y gr oups that y ou w ant . L imiting Ho st A cces s T ak e the f ollow ing st eps if y ou want t o enable some ho sts to acces s certain volume s so that the other hos ts cannot access the v olumes: â¢ Cr eating a host gr oup (s ee â Creating a Ho st Gr oup â on page 47) â¢ Regis ter ing hosts in the ho st gr oup (see â R egister ing Hosts in a Ho st Gr oup â on page 48) â¢ Regis ter ing ports in the host gr oup (see â R egiste ring P orts in a Host Gr oup â on page 49) â¢ Cr eating an LDEV gro up (see â Cr eating an LDEV Gr oup â on page 50) â¢ Regis ter ing v olumes in the LDEV gr oup (see â Register ing V olumes in an LDEV Gr oup â on page 51) â¢ Cr eating a sec urity gr oup and cla ssifying the s ecur ity gro up as an access gr ou p (see â Cr eating a Sec urity Gr oup fo r Use As an Acce ss Gr oup â on page 52) â¢ Regis ter ing the host gr oup and the LDEV gr ou p in the sec urity gr oup (see â Regis ter ing a Host Gr oup and an LDEV Gr oup in a S ecur ity Gro up â on page 53) Cr eating a Hos t Gr oup T o specify hos ts that can access v olumes, y ou m ust c reat e a host gr oup and then r egist er the hosts in the hos t grou p . The f ollo wing is the pr ocedur e f or c reating a ho st gr oup . F or de tails on ho w t o r egister ho sts in a ho st gr oup , see â R egister ing Hosts in a Ho st Gr oup â on page 48. CA UTION: When c r eating a ho st gr oup , y ou ar e str ongl y r ecommend ed to cli ck the Appl y butto n in the V olume Secur ity win do w , as desc r ibed in the las t step o f the fo llo wing p rocedur e . If y ou f or get to c lick Appl y , yo u might l ose the h ost gr ou p when y ou en counte r an er ro r r egister ing th e host gr ou p and the LDEV gr oup (s ee â Regist er ing a Host Gr o up and an LDEV Gr oup in a Sec ur ity Gro up â on page 53). T o cr eate a host gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck Host Group. A pop-up menu a ppears. 4. Select A dd/Change fr om the pop-up menu . XP2 4000/XP20000 V olume Secur ity User's Gui de 4 7
The A dd/Change Hos t Grou p dialog bo x ( F igur e 9 ) appears . 5. In the Enter Host Group bo x, ent er the name of the hos t gro up that y ou want t o cr eate , and then cli ck the Add button . NO TE: Host gr o up names can be u p to ei ght ch ara cter s and ar e case-sensiti v e. T he f irst c har acte r and the la st char ac ter m ust no t be a space . Also , th e foll ow ing char acter s are un usa ble in ho st gr oup names: \ , / : ; * ? " < > | 6. Conf irm that the ne w hos t gro up is displa yed b y blue in Host Group L ist , and then cli ck OK. CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 7 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 8. Cli ck Y es . The s ettings are a pplied to the st orage s y stem . R egister ing Ho sts in a Hos t Gr oup No w that yo u hav e cr eated a hos t gro up , then y ou need to r egister hos ts in the host gr ou p. CA UTION: When r egister ing hos ts a host gr ou p , yo u are s tr ongl y reco mmended to c lic k the Apply bu tton in the V olume Secur ity win dow , as desc r ibed in the las t step o f the fo llo wing pr ocedure . If y ou fo rg et to cli ck Apply, t he hos ts might be unr egist er ed when y ou en counte r an err or regis ter ing the h ost gr ou p and the LDEV gr ou p (see â R egister ing a Hos t Gr oup and an LDEV Gr ou p in a Secur ity Gr oup â on pa ge 53). T o registe r hosts in a ho st gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck a hos t gro up . A pop-up menu a ppears. 4. Select Specify and then Host fro m the pop-up menu . The A dd/Change Hos t dialog bo x ( F igur e 11 ) appears and displa y s a list of ho sts. 5. Select and the n ri ght cli ck one or mor e ho sts that y ou wan t to regis ter . If a hos t is indicated b y the icon or , the hos t is alread y r egister ed in the spec ifi ed host gr oup . F or details on the meaning of ico ns, see â The A dd/Change Hos t Dialog Box â on page 27. If ports are r egist ered in the dis play ed hos t grou p, y ou can r egist er only the ho sts that do not belong to an y other ho st gr oup . Y ou cannot regis ter hos ts that belong to an y other hos t gro up . P erforming V olume Secur ity Oper ations 48
If no ports ar e regis ter ed in the display ed hos t gro up , yo u can regist er the follo w ing hos ts: â¢ hos ts that do not belong to an y hos t gro up â¢ hos ts belonging to hos t gro ups in whi ch n o ports are r egister ed Ho we v er , you cann ot regis ter hos ts belonging to hos t gr oups in w hic h ports are r egister ed . 6. Select R egistration and then Register Host in Host Gr oup fr om the pop-up men u . The s pecif ied ho sts ar e display ed b y blue and also indicat ed by the icon or the ico n. 7 . Cli ck OK in the Add/Change Hos t dialog bo x. CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 8. Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 9 . Cli ck Y es . The s ettings are a pplied to the st orage s y stem . R egister ing P orts in a Host Gr oup After registe ring hos ts in a h ost gr ou p, you can r egist er ports in the host group to implement por t-lev el sec urity . T o r egist er ports in a host gr oup , y ou must ensur e that V olume Secur ity P ort Option is alread y installed . If y ou do not w ant to implemen t port -lev el sec ur ity , y ou do not need t o regis ter ports in host gr oup s. If no ports ar e regis ter ed in a host gr oup , ho sts in the hos t grou p can access v olumes v ia e very port to w hich the h osts ar e connected . CA UTION: When y ou r egist er ports in a ho st gr oup , it is stro ngly r ecommen ded that y ou c lick t he Apply bu tton in the V olume Sec urity w indo w at the en d of the ope r ation (s ee the end o f the f ollo wing p rocedur e) . If y ou do not c lic k Apply , registr ati on of po rts could be cancelled w hen an er r or occ urs r egist er ing a hos t gro up and an LDEV gr ou p (see â R egister ing a Hos t Gr oup and an LDEV Gr ou p in a Secur ity Gr oup â on pa ge 53). T o registe r ports in a host gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck a hos t gro up . A pop-up menu a ppears. 4. Select Specify and then P ort fro m the pop-up menu . The S elect P ort dialog bo x ( F igur e 13 ) appears and displa y s a list of ports. 5. F r om the P ort list in the Unregistered port box , select o ne or mor e ports via w hic h hos ts in the hos t grou p should access v olumes . Next , c lic k the Regist button. The s pecif ied ports ar e displa yed in blue in the P ort list in the Registered port box . T o select all the ports in the P ort list in the Unregistered port box , cli ck the Select All button . XP2 4000/XP20000 V olume Secur ity User's Gui de 4 9
If h osts register ed in the hos t gr oup are also r egiste red in another host group , you cannot r egiste r ports in the P or t list in the Registered por t box , and thus y ou cannot implement port-lev el s ecur ity . 6. Cli ck OK in the Select P ort dialog bo x. The S elect P ort dialog bo x clos es and y ou are r etur ned to the V olume Secur ity w indow . CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 7 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 8. Cli ck Y es . The s ettings are a pplied to the st orage s y stem . Cr eating an LDEV Gr ou p T o specify v olumes that should be sec ur ed , you m ust c reat e an LDEV gro up and then r egister the vo lumes in the LDEV gr oup . The f ollo wing pr ocedur e explains ho w to cr eate an LDEV gr oup . F or details on how to r egister v olumes in an LDEV gr oup , see â R egister ing V olumes in an LDEV Gr oup â on page 51. CA UTION: When c r eating an LDEV gr oup , you ar e str on gly r ecommend ed to cli ck the Appl y butto n in the V olume Secur ity win do w , as desc r ibed in the las t step o f the fo llo wing p rocedur e . If y ou f or get to c lick Appl y , yo u might l ose the LDEV gr o up whe n you e ncount er an er r or r egister ing t he host gr oup and the LDEV gr oup (s ee â Regist er ing a Host Gr o up and an LDEV Gr oup in a Sec ur ity Gro up â on page 53). T o cr eate an LDEV gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck LDEV Gr oup . A pop-up menu a ppears. 4. Select A dd/Change fr om the pop-up menu . The A dd/Change LDEV Gr oup di alog box ( F i gure 10 ) a ppears. 5. In the Enter LDEV Group bo x, en ter the name of the LDEV gr oup that y ou w ant to c reat e, and then cli ck the A dd button . NO TE: LDEV gr oup name s can be up to e ight c har acte rs and ar e cas e-sensitiv e . The f irs t char act er and the la st char ac ter m ust no t be a space . Also , th e foll ow ing char acter s are un usa ble in ho st gr oup names: \ , / : ; * ? " < > | 6. Conf irm that the ne w LDEV gr oup is displa y ed by blue in LDE V Group List , and then c lic k OK. P erforming V olume Secur ity Oper ations 50
CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 7 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 8. Cli ck Y es . The s ettings are a pplied to the st orage s y stem . R egister ing V olumes in an LDEV Gr ou p No w that yo u hav e cr eated an LDEV gr oup , then y ou need to r egister v olumes in the LDEV gr ou p . CA UTION: When r egister ing vo lumes in an LDEV gr oup , y ou ar e str ongl y r ecommended t o cli ck the Appl y butto n in the V olume Sec urity w indo w , as des cr ibed in the la st step o f the f ollo wing p r ocedur e. If y ou f or get to c lick Appl y , the v olumes migh t be unr egister ed w hen y ou encoun ter an er r or r egist er ing the ho st gr oup an d the LDEV gr oup (see â R egister ing a Hos t Gr oup and an LDEV Gr ou p in a Secur ity Gr oup â on pa ge 53). T o registe r volumes in an LDE V grou p: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck an LDEV gr oup . A pop-up menu a ppears. 4. Select Specify and then LDEV fr om the pop-up menu . The S elect LDEV dialog bo x ( F igur e 12 ) appear s. 5. Use the CU drop-do w n list to spec ify a CU image . The tw o bo xes be low the dr op-do wn lis t display s v olumes in the spec if ied CU image . â¢ The R egistered in LDEV gr oup bo x display s v olumes r egister ed in the LDEV gr oup . â¢ The Not r egistered in LDEV gr oup box displa ys v olumes that ar e not r egist ered in the LDE V gr oup . 6. In the Not register ed in LDEV group box , select v olumes that y ou w ant to r egister . Then , cli ck the Regist button. The s elected v olumes mo ve t o the Registered in LDEV gr oup box . 7 . T o registe r volumes in o ther CU images , retur n to step 5 . 8. Cli ck OK. CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 9 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). XP2 4000/XP20000 V olume Secur ity User's Gui de 51
A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 10. Clic k Y es . The s ettings are a pplied to the st orage s y stem . Cr eating a Sec ur ity Gr oup f or Us e As an Acce ss Gr ou p T o mak e s ecur ity s ettings, you must cr eate secur ity gr oup s. Secur ity gr oup s can be c lassif ied as acces s gr oups or pool gr ou ps. Y ou must c lassify a sec ur ity group a s an access gr oup if y ou w ant to allo w vo lumes to be access ed only b y spec if ied hosts . T o cr eate a sec urity gr oup and c lassify the gro up as an access gr ou p: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck Security Group. A pop-up menu a ppears. 4. Select A dd/Change fr om the pop-up menu . The A dd/Change Sec ur ity Group di alog box ( F igure 8 ) a ppears. 5. In the Enter Security Group box , enter the name o f the sec urity gr oup that y ou w ant to cr eate . NO TE: Secur ity gr oup n ames can be up to e igh t char acte rs and ar e ca se-sensitiv e . The f ir st char ac ter and the l ast ch ara cter m ust no t be a space . Also , th e follo w ing char ac ter s ar e unusa ble in sec ur ity gr oup name s: \ , / : ; * ? " < > | 6. In the Security bo x, se lect Enable. 7 . In the Group Status bo x, se lect Access. 8. In the T - VOL/R - V OL bo x, se lect Enable or Disable. â¢ Select Enable if y ou want mak e v olumes in the sec ur ity grou p usable as s econdary volumes (that is, cop y destinati on vo lumes) for cop y oper ations . â¢ Select Disable if you wan t make v olumes in the sec ur ity gr ou p unusable as secondary volumes (that is, cop y destinati on vo lumes) for cop y oper ations . 9 . Cli ck Add. Info rmation about the ne w sec urity gr oup is added to the Sec urity Group L ist table and is displa y ed in blue . 10. Clic k OK. CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 11. Clic k Apply in the V olume Sec ur ity windo w ( F igur e 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 12. Clic k Y es . The s ettings are a pplied to the st orage s y stem . P erforming V olume Secur ity Oper ations 5 2
R egister ing a Ho st Gr ou p and an LDEV Gr oup in a S ec urity Gr ou p No w that yo u hav e classif ied y our s ecur ity grou p as an access gr oup , y our ne xt (and the last) ta sk is to r egister y our ho st gr oup and LDEV gr oup into the s ecur ity gr oup . When y ou f inish regis trati on, the vo lumes in the LDEV gr oup ar e sec ured and can o nly be acces sed by h osts in the hos t gro up . Other hos ts cannot access the v olumes . T o registe r a host gr oup and an LDEV gr ou p into a sec urity gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck a sec ur ity group . A pop-up menu a ppears. 4. Select Specify and then Security Group from the pop-u p menu . The S pec ify Secur ity Grou p dialog bo x ( F igur e 14 ) appears . 5. Use the Select Security Group drop-do wn lis t to selec t the secur ity gr oup in whi ch y ou w ant to r egister a ho st gr oup and an LDEV gr oup . 6. Use the Host Group dr op-do wn list to s elect the h ost grou p that you wan t to regis ter in the sec urity gr oup . 7 . Use the LDE V Group drop-do w n list to selec t the LDEV gro up that y ou want t o regis ter in the se - c urity gr oup , and then cli ck OK. 8. Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 9 . Cli ck Y es . The s ettings are a pplied to the st orage s y stem . CA UTION: If the Er r or Detail di alog bo x (secti on â Th e Err or De tail Dialog Bo x â on pag e 41) appear s, see the Caution in â P ort-Le v el Secur ity Imple menta tion â on pag e 10 and then r em ov e er r ors . Pr o hibiting Ho st A cces s V olume Sec ur ity enables you to prohib it all the hos ts f rom accessing the spec ified volumes . T o do this, tak e the follo w ing majo r steps: â¢ Cr eating an LDEV gro up (see â Cr eating an LDEV Gr oup â on page 53) â¢ Regis ter ing v olumes in the LDEV gr oup (see â Register ing V olumes in an LDEV Gr oup â on page 54) â¢ Cr eating a sec urity gr oup and cla ssifying the s ecur ity gro up as a pool gr oup (see â Cr eating a Sec urity Gr oup fo r Use As a P ool Gr oup â on page 55) â¢ Regis ter ing the LDEV gro up in the sec urity gr oup ( â Regis ter ing an LDEV Gro up in a Sec urity Gr oup â on page 56) Cr eating an LDEV Gr ou p T o specify v olumes that should be sec ur ed , you m ust c reat e an LDEV gro up and then r egister the vo lumes in the LDEV gr oup . XP2 4000/XP20000 V olume Secur ity User's Gui de 5 3
The f ollo wing pr ocedur e explains ho w to cr eate an LDEV gr oup . F or details on how to r egister v olumes in an LDEV gr oup , see â R egister ing V olumes in an LDEV Gr oup â on page 54. CA UTION: When c r eating an LDEV gr oup , you ar e str on gly r ecommend ed to cli ck the Appl y butto n in the V olume Secur ity win do w , as desc r ibed in the las t step o f the fo llo wing p rocedur e . If y ou f or get to c lick Appl y , yo u might l ose the LDEV gr o up whe n you e ncount er an er r or r egister ing t he LDEV gr oup (see â R egister ing an LDEV Gr ou p in a Secur ity Gro up â on page 56). T o cr eate an LDEV gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck LDEV Gr oup . A pop-up menu a ppears. 4. Select A dd/Change fr om the pop-up menu . The A dd/Change LDEV Gr oup di alog box ( F i gure 10 ) a ppears. 5. In the Enter LDEV Group bo x, en ter the name of the LDEV gr oup that y ou w ant to c reat e, and then cli ck the A dd button . NO TE: LDEV gr oup name s can be up to e ight c har acte rs and ar e cas e-sensitiv e . The f irs t char act er and the la st char ac ter m ust no t be a space . Also , th e foll ow ing char acter s are un usa ble in ho st gr oup names: \ , / : ; * ? " < > | 6. Conf irm that the ne w LDEV gr oup is displa y ed by blue in LDE V Group List , and then c lic k OK. CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 7 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 8. Cli ck Y es . The s ettings are a pplied to the st orage s y stem . R egister ing V olumes in an LDEV Gr ou p No w that yo u hav e cr eated an LDEV gr oup , then y ou need to r egister v olumes in the LDEV gr ou p . P erforming V olume Secur ity Oper ations 54
CA UTION: When r egister ing vo lumes in an LDEV gr oup , y ou ar e str ongl y r ecommended t o cli ck the Appl y butto n in the V olume Sec urity w indo w , as des cr ibed in the la st step o f the f ollo wing p r ocedur e. If y ou f or get to c lick Appl y , the v olumes migh t be unr egister ed w hen y ou encoun ter an er r or r egist er ing the LDEV gr oup (s ee â Regist er ing an LDEV Gr oup in a Sec ur ity Grou p â on page 56). T o registe r volumes in an LDE V grou p: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck an LDEV gr oup . A pop-up menu a ppears. 4. Select Specify and then LDEV fr om the pop-up menu . The S elect LDEV dialog bo x ( F igur e 12 ) appear s. 5. Use the CU drop-do w n list to spec ify a CU image . The tw o bo xes be low the dr op-do wn lis t display s v olumes in the spec if ied CU image . â¢ The R egistered in LDEV gr oup bo x display s v olumes r egister ed in the LDEV gr oup . â¢ The Not r egistered in LDEV gr oup box displa ys v olumes that ar e not r egist ered in the LDE V gr oup . 6. In the Not register ed in LDEV group box , select v olumes that y ou w ant to r egister . Then , cli ck the Regist button. The s elected v olumes mo ve t o the Registered in LDEV gr oup box . 7 . T o registe r volumes in o ther CU images , retur n to step 5 . 8. Cli ck OK. CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 9 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 10. Clic k Y es . The s ettings are a pplied to the st orage s y stem . Cr eating a Sec ur ity Gr oup f or Us e As a P ool Gr oup T o mak e s ecur ity s ettings, you must cr eate secur ity gr oup s. Secur ity gr oup s can be c lassif ied as acces s gr oups or pool gr ou ps. Y ou must c lassify a sec ur ity group a s a pool gro up if y ou want t o pro hibit all the hos ts fr om accessing v olumes . T o cr eate a sec urity gr oup and c lassify the gro up as a pool gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck Security Group. A pop-up menu a ppears. XP2 4000/XP20000 V olume Secur ity User's Gui de 5 5
4. Select A dd/Change fr om the pop-up menu . The A dd/Change Sec ur ity Group di alog box ( F igure 8 ) a ppears. 5. In the Enter Security Group box , enter the name o f the sec urity gr oup that y ou w ant to cr eate . NO TE: Secur ity gr oup n ames can be up to e igh t char acte rs and ar e ca se-sensitiv e . The f ir st char ac ter and the l ast ch ara cter m ust no t be a space . Also , th e follo w ing char ac ter s ar e unusa ble in sec ur ity gr oup name s: \ , / : ; * ? " < > | 6. In the Security bo x, se lect Enable. 7 . In the Group Status bo x, se lect P ool . 8. In the T - VOL/R - V OL bo x, se lect Enable or Disable. â¢ Select Enable if y ou want mak e v olumes in the sec ur ity grou p usable as s econdary volumes (that is, cop y destinati on vo lumes) for cop y oper ations . â¢ Select Disable if you wan t make v olumes in the sec ur ity gr ou p unusable as secondary volumes (that is, cop y destinati on vo lumes) for cop y oper ations . 9 . Cli ck Add. Info rmation about the ne w sec urity gr oup is added to the Sec urity Group L ist table and is displa y ed in blue . 10. Clic k OK. CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 11. Clic k Apply in the V olume Sec ur ity windo w ( F igur e 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 12. Clic k Y es . The s ettings are a pplied to the st orage s y stem . R egister ing an LDEV Gr oup in a Sec ur ity Gr oup No w that yo u hav e classif ied y our s ecur ity grou p as a pool gr oup , y our next (and the la st) task is to r egister y our LDEV gr oup int o the secur ity gr oup . When y ou f inish regis trati on, the v olumes in the LDEV gr oup ar e sec ured and inacce ssible fr om an y hos ts. T o registe r an LDEV gro up into a sec ur ity group: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck a sec ur ity group . A pop-up menu a ppears. 4. Select Specify and then Security Group from the pop-u p menu . The S pec ify Secur ity Grou p dialog bo x ( F igur e 14 ) appears . P erforming V olume Secur ity Oper ations 5 6
5. Use the Sel ect Security G roup dr op-dow n list to select a sec ur ity grou p in whi ch y ou w ant to r egister an LDEV gr oup . 6. Use the LDEV Group dr op-dow n list to se lect an LD EV group that y ou w ant to regist er in the secur ity gr oup , and then cli ck OK. 7 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 8. Cli ck Y es . The s ettings are a pplied to the st orage s y stem . CA UTION: If the Er r or Detail di alog bo x (secti on â Th e Err or De tail Dialog Bo x â on pag e 41) appear s, see the Caution in secti on â P ort-Le v el Secur ity Imple menta tion â on pag e 10 and then r em ov e er r ors . Pr o tecting V olumes f r om Cop y Oper atio ns The f ollo w ing procedur e mak es v olumes in a sec ur ity group un usable as s econdary volumes (that is , copy de stination v olumes) f or cop y operati ons, s o yo u will be a ble to pro tect data the v olumes fr om being o v erwr itten by cop y oper ations . T o make v olumes in a sec ur ity group un usable as s econdary volumes: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck Security Group or the desir ed sec urity gr oup . A pop-up menu a ppears. 4. Select A dd/Change fr om the pop-up menu . The A dd/Change Sec ur ity Group di alog box ( F igure 8 ) a ppears. 5. Ensur e that the desir ed sec urity gr oup is selec ted in the Security Group List table . 6. Select Disable in the T - VOL/R - V OL bo x. 7 . Cli ck Change. The c hange is r eflec ted in the dialog bo x. 8. Cli ck OK. CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 9 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 10. Clic k Y es . The s ettings are a pplied to the st orage s y stem . XP2 4000/XP20000 V olume Secur ity User's Gui de 5 7
TIP: T o make v olumes in y our sec ur it y gr ou p usab le as secon dary volumes (t hat is, co py de stinatio n vo lumes) fo r cop y oper atio ns, y ou mu st selec t the sec urity gr ou p in the Add/C hange Sec urity Gr ou p dialog bo x ( F i gur e 8 ) and then se lect Enable in the T - V OL/R- V OL bo x. Ne xt , cli ck Change and the n OK . F inall y , clic k Apply in the V olume Sec ur ity windo w ( F igur e 4 ). Disa bling V olume Sec urity If y ou f ollo w the pr ocedur e belo w to manipulate a secur ity gro up , y ou w ill be able t o disable s ecur ity on v olumes in the sec urity gr oup . If sec ur ity is disabled, v olumes in the s ecur ity grou p are acce ssible fr om all ho sts and ar e usable as s econdary volumes (that is , copy des tination v olumes) f or copy oper ations , regar dles s of whe ther the sec urity gr oup is an access gr ou p or a pool gr oup . T o res tor e sec urity , y ou can r estor e it in an eas y and simple oper atio n. If y ou ar e sur e that y ou w ill not need to r esto re s ecur ity , y ou can delete y our sec ur ity gro up to disa ble sec urity . F or details o n how t o delete sec ur ity group s, see â Deleting S ecur ity Gro ups â on page 61. T o disable sec urity on v olumes: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck the sec ur ity group in w hic h the desir ed vo lumes ar e regis ter ed. A pop-up menu a ppears. 4. Select A dd/Change fr om the pop-up menu . The A dd/Change Sec ur ity Group di alog box ( F igure 8 ) a ppears. 5. Ensur e that the desir ed sec urity gr oup is selec ted in the Security Group List table . 6. Select Disable in the Security box . 7 . Cli ck Change. The c hange is r eflec ted in the dialog bo x. 8. Cli ck OK. CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 9 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 10. Clic k Y es . The s ettings are a pplied to the st orage s y stem . TIP: T o res tor e sec urity , y ou mu st selec t the sec urity gr ou p in the Add/C hange Sec ur it y Gr ou p dialog bo x ( F igur e 8 ) and t hen selec t Enable in the Security box . Ne xt , clic k Change and then OK. F inall y , clic k Apply in th e V olume Secur ity windo w ( F i gure 4 ). P erforming V olume Secur ity Oper ations 5 8
E diting Sec ur ity Gr oup s This s ection e xplains the f ollo wing oper ati ons, w hic h allow y ou to edit y our sec ur ity grou ps: â¢ Unr egister ing a hos t gro up fr om a sec ur ity group (see â Unr egist ering a Ho st Gr oup â on page 59) â¢ Unr egister ing an LDEV gr oup fr om a s ecur ity gro up (see â Unr egister ing an LDEV Gr oup â on page 59) â¢ Re naming a secur ity gr oup (see â R enaming Sec urity Gr oups â on page 60). â¢ Deleting a sec ur ity group (s ee â Deleting Sec urity Gr oups â on page 61) Unr egist er ing a Host Gr oup T o unregiste r a host gr oup f ro m a sec urity gr oup , tak e the follo w ing step s: T o unregiste r a host gr oup f ro m a sec urity gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. Locat e and double -cli ck a sec ur ity grou p. The tr ee v ie w displa ys the ho st gr oup in the spec if ied sec ur it y gr oup . 4. R ight-cli ck the hos t gro up and the select Delete fr om the pop-up men u . A mess age appears and asks if y ou w ant to unr egister the spec if ied ho st gr oup . 5. Cli ck Y es to close the me ssage . CA UTION: Her e , the c hanges in the w indo w ha ve no t been app lied to th e stor age s y stem . 6. Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the changes to the s tor age sy st em. 7 . Cli ck Y es . The c hanges ar e applied to the s tor age sy st em. Unr egist er ing an LDEV Gr oup T o unregiste r an LDEV gro up fr om a sec ur ity group , tak e the f ollo wing s teps: T o unregiste r the LDEV gro up fr om a sec ur ity group: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. Locat e and double -cli ck a sec ur ity grou p. The tr ee v ie w displa ys the LDEV gr oup in the s pecif ied s ecur ity gro up . 4. R ight-cli ck the LDEV gr oup and the se lect Delete from the pop-u p menu . A mess age appears and asks if y ou w ant to unr egister the spec if ied LDEV gr oup . 5. Cli ck Y es to close the me ssage . XP2 4000/XP20000 V olume Secur ity User's Gui de 5 9
CA UTION: Her e , the c hanges in the w indo w ha ve no t been app lied to th e stor age s y stem . 6. Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the changes to the s tor age sy st em. 7 . Cli ck Y es . The c hanges ar e applied to the s tor age sy st em. R enaming Sec ur ity Gr oups T o rename a sec ur ity grou p, t ake the f ollo w ing steps: T o rename a sec ur ity grou p: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck Security Group or a sec urity gr oup . A pop-up menu a ppears. 4. Select A dd/Change fr om the pop-up menu . The A dd/Change Sec ur ity Group di alog box ( F igure 8 ) a ppears. 5. Ensur e that the desir ed sec urity gr oup is selec ted in the Security Group List table . 6. In the Enter Security Group box , enter the ne w name f or the sec urity gr oup . NO TE: Secur ity gr oup n ames can be up to e igh t char acte rs and ar e ca se-sensitiv e . The f ir st char ac ter and the l ast ch ara cter m ust no t be a space . Also , th e follo w ing char ac ter s ar e unusa ble in sec ur ity gr oup name s: \ , / : ; * ? " < > | 7 . Cli ck Change. The c hange is r eflec ted in the dialog bo x. 8. Cli ck OK. CA UTION: Her e , the c hange in the w indo w has n ot been app lied to t he stor age s y ste m. 9 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). mess age appears and asks if y ou w ant to appl y the change to the s tor age sy stem . 10. Clic k Y es . The c hange is applied t o the stor age sy st em. P erforming V olume Secur ity Oper ations 60
Deleting Sec ur ity Gr oup s T o delete a sec urity gr oup , tak e the follo w ing step s: T o delete a sec urity gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. Do either o f the follo w ing: â¢ R ight-cli ck a sec ur ity group in the tr ee v ie w . â¢ R ight-cli ck Security Group in the tree vie w and then se lect Add/Change fr om the pop-up men u . Ne xt, in the A dd/Change Sec urity Gr oup di alog box ( F igure 8 ), select one o r more s ecur ity gr oups in the Security Group L ist table and r ight-cli ck the se lection . 4. Select Delete fr om the pop-up men u . A mess age appears and asks if y ou w ant to delete the s pecif ied s ecur ity grou p(s) . 5. Cli ck Y es to close the me ssage . If the Add/C hange Secur ity Gr oup dialog bo x ( F igur e 8 ) still r emains display ed , cli ck OK to clo se the dialog bo x. CA UTION: Her e , the c hange in the w indo w has n ot been app lied to t he stor age s y ste m. 6. Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the change to the s tor age sy stem . 7 . Cli ck Y es . The c hange is applied t o the stor age sy st em. E diting Host Gr oup s This s ection e xplains the f ollo wing oper ati ons, w hic h allow y ou to edit y our ho st gr oups: â¢ Regis ter ing hosts that ha ve no t been attached to the st orage s y stem in to a host gr ou p (see â Regis ter ing Hosts to be A ttached to the S tor age S yst em â on page 61) â¢ Deleting hos ts fr om a hos t grou p (see â Deleting Hos ts fr om Host Gr ou ps â on page 62) â¢ Deleting ports fr om a hos t gr oup (see â Deleting P orts fr om Hos t Grou ps â on page 63) â¢ Re naming a host gr oup (s ee â Renaming Ho st Gr oups â on page 64) . â¢ Deleting a hos t gro up (see â Deleting Hos t Gro ups â on page 65) R egister ing Ho sts to be A ttached to the S tor age S y stem If your or ganiz ation is planning to attach new mainfr ame h osts to the st orage s ys tem, y ou will possibl y need to r ev ise s ecur ity settings on v olumes. F or ex ample , if y ou do not w ant to allo w the new ho sts to access s ome vo lumes, y ou migh t need to regis ter the ne w hosts in the ho st gr oup in an e x isting access gr oup . V olume Sec ur ity enables y ou to r egister ne w hosts in h ost gr oups be for e the ne w hosts ar e attached v ia cables t o the stor age s yst em. T o registe r a mainfr ame host to be attac hed into a ho st gr oup: 1. Exec ute the f ollo w ing sy st em command at the mainfr ame host: XP2 4000/XP20000 V olume Secur ity User's Gui de 61
D M=CPU This command display s the t ype , the model n umber , the n ode ID and the logical partition number of the ho st . W r ite do wn the inf ormati on on a paper s o that you w ill not f or get it . F or details on the s y stem co mmand, see the doc ument ation f or sy ste m commands. 2. Ensur e that you ar e in Modify mode . 3. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 4. R ight-cli ck Host Group to displa y a list of ho st gr oups . 5. R ight-cli ck the hos t gro up in whi ch y ou w ant to r egister the ho st . Next , se lect Specify and then Host fr om the pop-up menu . The A dd/Change Hos t dialog bo x ( F igur e 11 ) appears . 6. Use the text bo xe s and the dr op-dow n list to specify inf ormatio n about the ho st y ou want to regist er ; y ou hav e alr eady obtained the inf ormati on earlie r in this procedur e (see s tep 1) . 7 . Cli ck Add. The s pecif ied ho st is added to the table and is indi cated b y the icon . 8. Cli ck OK. CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 9 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 10. Clic k Y es . The s ettings are a pplied to the st orage s y stem . TIP: â¢ If you r egist er ed a host in an in cor rec t host gr ou p , f irst y ou mu st f ollo w the abo v e pr ocedur e to r egister t he host in t he cor r ect host gr oup . The n, y ou m ust f ollo w the pr ocedure in sec tion â Deletin g Hosts f r om Host Gr ou ps â on page 62 t o r emo ve t he host f r om the inco rr ect h ost gr ou p . â¢ Y ou can modify inf orm ation a bout ho sts indica ted b y in the Add/C hange Hos t dialog bo x ( F igur e 11 ). T o modify inf or matio n, f irs t select t he desir ed hos t in the ta ble and the n use te xt bo x es and/or dr op d ow n list to c hange inf orma tion . Ne xt, c lic k Change and then OK. F inall y , clic k Apply in th e V olume Secur ity windo w ( F i gure 4 ). â¢ T o delete a ho st indi cated b y fr om the A dd/Chan ge Host di alog bo x ( F igur e 11 ), you m ust f irst se lect and r igh t-cli ck the h ost , se lect Delete fr om t he pop-up men u , and then s elect OK. F inall y , cli ck Apply in t he V olume Secur ity wind ow ( F igur e 4 ) . Deleting Hos ts fr om Host Gr ou ps T o delete hosts f ro m a host gr oup , tak e the f ollo wing s teps: T o delete hosts f ro m a host gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . P erforming V olume Secur ity Oper ations 6 2
3. R ight-cli ck a hos t gro up . A pop-up menu a ppears. 4. Select Specify and then Host fro m the pop-up menu . The A dd/Change Hos t dialog bo x ( F igur e 11 ) appears and displa y s a list of ho sts. T he icons and indicate hos ts regis ter ed in the spec ifi ed host gr oup . 5. Select and the n ri ght cli ck one or mor e ho sts (indicated b y or ) that yo u want to de lete . 6. Select R egistration and then Unregister Host fr om Host Group fr om the pop-up menu . The s pecif ied ho sts ar e display ed b y blue . Also , icons dis appear or change t o or . The i cons and indi cate that the host is r egist ered in an other hos t grou p . 7 . Cli ck OK in the Add/Change Hos t dialog bo x. CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 8. Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 9 . Cli ck Y es . The s ettings are a pplied to the st orage s y stem . Deleting P orts fr om Ho st Gr oup s T o delet e ports fr om ho st gr oups , you mu st ensur e that V olume Sec ur ity P ort Option is alr eady inst alled. T o delete ports fr om a host gr ou p, t ake the f ollo w ing steps: T o delete ports fr om a host gr ou p: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck a hos t gro up . A pop-up menu a ppears. 4. Select Specify and then P ort fro m the pop-up menu . The S elect P ort dialog bo x ( F igur e 13 ) appears . 5. In the P ort list in the Registered port box , selec t one or mor e ports that you w ant to de lete . Next , cli ck the Unr egist button . The s pecif ied ports ar e displa yed in blue in the P ort list in the Unregistered port bo x. NO TE: T o select all ports in th e P ort list in the Register ed port box , cli ck the Select All butto n. 6. Cli ck OK in the Select P ort dialog bo x. The S elect P ort dialog bo x clos es and y ou are r etur ned to the V olume Secur ity w indow . XP2 4000/XP20000 V olume Secur ity User's Gui de 6 3
CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 7 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 8. Cli ck Y es . The s ettings are a pplied to the st orage s y stem . R enaming Hos t Gr oups T o rename a ho st gr oup , tak e the follo w ing step s: T o rename a ho st gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck Host Group or a ho st gr oup . A pop-up menu a ppears. 4. Select A dd/Change fr om the pop-up menu . The A dd/Change Hos t Grou p dialog bo x ( F igur e 9 ) appears . 5. Ensur e that the desir ed host gr oup is s elected in the Host Gr oup List table . 6. In the Enter Host Group bo x, ent er the new name f or the hos t gr oup . NO TE: Host gr o up names can be u p to ei ght ch ara cter s and ar e case-sensiti v e. T he f irst c har acte r and the la st char ac ter mu st no t be a space . Also , the f ollo w ing char act ers ar e un usa ble in sec urity gr oup name s: \ , / : ; * ? " < > | 7 . Cli ck Change. The c hange is r eflec ted in the dialog bo x. 8. Cli ck OK. CA UTION: Her e , the c hange in the w indo w has n ot been app lied to t he stor age s y ste m. 9 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the change to the s tor age sy stem . 10. Clic k Y es . The c hange is applied t o the stor age sy st em. P erforming V olume Secur ity Oper ations 64
Deleting Hos t Gr oup s T o delete a host gr oup , tak e the f ollo wing s teps . T o delete a host gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. Do either o f the follo w ing: â¢ R ight-cli ck a hos t gro up in the tr ee vi ew . â¢ R ight-cli ck Host Group in the tr ee vi ew and the n select Add/Change fr om the pop-up menu . Ne xt, in the A dd/Change Host Gr ou p dialog bo x ( F igur e 9 ) , selec t one or mor e host gr oup s in the Host Group L ist table and r ight-cli ck the se lection . 4. Select Delete fr om the pop-up men u . A mess age appears and asks if y ou w ant to delete the s pecif ied ho st gr oup(s). 5. Cli ck Y es to clo se the mes sage . If the Add/Change Host Gr oup dialog box ( F igur e 9 ) still remains displa yed , cli ck OK to clo se the dialog bo x . CA UTION: Her e , the c hange in the w indo w has n ot been app lied to t he stor age s y ste m. 6. Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the change to the s tor age sy stem . 7 . Cli ck Y es . The c hange is applied t o the stor age sy st em. E diting LD EV Gr oups This s ection e xplains the f ollo wing oper ati ons, w hic h allow y ou to edit y our ho st gr oups: â¢ Deleting v olumes fr om an LDEV gr oup (s ee â Deleting V olumes fr om LDEV Gr oups â on page 65) â¢ Re naming an LDEV gro up (see â R enaming LDEV Gr oups â on page 66) . â¢ Deleting an LDEV gr oup (see â Dele ting LDEV Gro ups â on page 67) Deleting V olumes fr om LDEV Gr oups T o delete volume s fr om an LDEV gr oup , tak e the fo llow ing step s: T o delete volume s fr om an LDEV gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck an LDEV gr oup . A pop-up menu a ppears. 4. Select Specify and then LDEV fr om the pop-up menu . The S elect LDEV dialog bo x ( F igur e 12 ) appear s. 5. Use the CU drop-do w n list to spec ify a CU image . XP2 4000/XP20000 V olume Secur ity User's Gui de 6 5
The tw o bo xes be low the dr op-do wn lis t display s v olumes in the spec if ied CU image . â¢ The R egistered in LDEV gr oup bo x display s v olumes r egister ed in the LDEV gr oup . â¢ The Not r egistered in LDEV gr oup box displa ys v olumes that ar e not r egist ered in the LDE V gr oup . 6. In the Registered in LDE V group bo x, s elect v olumes that y ou wan t to delete . The n, c lick the Not regist button. The s elected v olumes mo ve t o the Not registered in LDE V group box . 7 . T o delete volume s in other CU images , re turn to step 5. 8. Cli ck OK. CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 9 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 10. Clic k Y es . The s ettings are a pplied to the st orage s y stem . R enaming LDEV Gr ou ps T o rename an LDEV gr oup , tak e the f ollo wing s teps: T o rename an LDEV gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. R ight-cli ck LDEV Gr oup or an LDEV gr oup . A pop-up menu a ppears. 4. Select A dd/Change fr om the pop-up menu . The A dd/Change LDEV Gr oup di alog box ( F i gure 10 ) a ppears. 5. Ensur e that the desir ed LDEV gro up is select ed in the LDEV Group L ist table . 6. In the Enter LDEV Group bo x, en ter the ne w name for the LDEV gr oup . NO TE: LDEV gr oup name s can be up to e ight c har acte rs and ar e cas e-sensitiv e . The f irs t char act er and the la st char ac ter mu st no t be a space . Also , the f ollo w ing char act ers ar e un usa ble in sec urity gr oup name s: \ , / : ; * ? " < > | 7 . Cli ck Change. The c hange is r eflec ted in the dialog bo x. 8. Cli ck OK. P erforming V olume Secur ity Oper ations 66
CA UTION: Her e , the c hange in the w indo w has n ot been app lied to t he stor age s y ste m. 9 . Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the change to the s tor age sy stem . 10. Clic k Y es . The c hange is applied t o the stor age sy st em. Deleting LDEV Gr ou ps T o delete an LDEV gr oup , tak e the follo w ing steps . T o delete an LDEV gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Secur ity windo w ( F i gure 4 ), double -cli ck an LDK C number . 3. Do either o f the follo w ing: â¢ R ight-cli ck an LDEV gr oup in the tr ee v ie w . â¢ R ight-cli ck LDEV Gr oup in the tr ee vi ew and then s elect Add/Change fro m the pop-up menu . Ne xt, in the A dd/Change LDEV Gr oup dialog bo x ( F i gure 10 ), select one o r more LDEV gr oups in the LDEV Gr oup List table and r ight-cli ck the selec tion . 4. Select Delete fr om the pop-up men u . A mess age appears and asks if y ou w ant to delete the s pecif ied LDEV gr oup(s). 5. Cli ck Y es to close the me ssage . If the Add/C hange LDEV Grou p dialog bo x ( F igur e 10 ) still r e - mains displa yed , cli ck OK to clo se the dialog bo x . CA UTION: Her e , the c hange in the w indo w has n ot been app lied to t he stor age s y ste m. 6. Cli ck Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the change to the s tor age sy stem . 7 . Cli ck Y es . The c hange is applied t o the stor age sy st em. XP2 4000/XP20000 V olume Secur ity User's Gui de 6 7
P erforming V olume Secur ity Oper ations 6 8
5 T r oubleshooting T r ou bleshooting V olume Sec ur it y The Er r or Detail dialog bo x ( F igur e 2 2 ) ma y appear whe n you atte mpt to appl y sec urity settings . The pr obable caus es of the er ror ar e: â¢ Some ho sts in one sec ur ity group ar e acces sing volume s in another sec ur it y gr oup . â¢ Some h osts do n ot belong t o any sec ur ity gro up , but the ho sts ar e acces sing volume s in a sec ur ity gr oup . T o remo ve this e rr or , y ou must f ind the hos ts and the volume s that cause the er r or . T o f ind them, t ake the fo llow ing step s: 1. In the Err or Detail di alog box , c lick the ar r ow bu tton at the ri ght end of the Host dr op-dow n list . â¢ If the dr op-dow n list displa y s only one e ntry , only one hos t is causing the er ro r . â¢ If the dr op-dow n list displa y s two or mor e entr ie s, two o r more h osts ar e causing the er r or . 2. Select a h ost fr om the Ho st dr op-dow n list . 3. R ight-cli ck the arr o w button at the r ight end o f the CU drop-do w n list , and then chec k ho w man y CU images ar e displa yed in the dr op-do w n list . â¢ If the dr op-dow n list displa ys only one entry , the table displa ys all the v olumes that ar e causing the err or . â¢ If the dr op-dow n list displa y s two or mor e entr ie s, some o f the err or -causing v olumes ar e dis- play ed in the table . T o v ie w other er r or -causing v olumes , use the C U drop-do wn list to s pecify another CU image . 4. If two or mo re ho sts ar e causing the er r or , repeat s teps 2 . to 3. If err or -cau sing hosts and v olumes ar e detect ed, do e ither of the f ollow ing to r emo v e the err or : â¢ V ar y the err or -causing v olume off line fr om the er ror -cau sing host . F or det ailed infor mation abou t vary ing the vo lume offline , see the doc umentati on fo r host commands . â¢ F ind the sec urity gr oup that con tains the err or -causing h osts and the er ro r-ca using vo lumes. Ne xt , disable the sec ur ity settings of the sec ur ity group (s ee â Disabling V olume Sec urity â on page 58) . F or tr oublesh ooting inf ormati on o n the storage sy ste m, see the HP St orage W orks XP2 4000/XP20000 Disk Ar ra y Ow ner's Guide . F or a comple te list of R emote W eb Conso le Err or Codes , see the HP Sto rage W orks XP2 4000/XP20000 Remo te W eb C onsole Er ro r Codes . F or tr oublesh ooting infor mation on ho st oper ations , see the MVS doc umentati on. Calling HP T echni cal Support If y ou need to call HP t echni cal support , mak e sure to pr ov ide as m uch informati on a bout the pr oblem as pos sible, inc luding: â¢ The c ir c umstances sur r ounding the err or or f ailure . â¢ The con tent of an y er ro r message(s) displa y ed on the host s y stem(s). XP2 4000/XP20000 V olume Secur ity User's Gui de 6 9
â¢ The co ntent of an y er ro r message(s) displa y ed on the Remo te W eb C onsole com puter . â¢ The S tor age Nav igato r confi gurati on infor mation (u se the FD Dump T ool) . â¢ The s ervi ce infor mation me ssages (S IMs) , inc luding re fer ence codes and se v erity le ve ls, displa yed by the R emote W eb Cons ole compute r . â¢ The V olume Sec ur ity (or other) er r or code(s) display ed on the R emote W eb Conso le computer . â¢ The e x act conte nt of an y err or mes sages displa yed o n the host s y stem(s). â¢ The servi ce inf ormatio n mess ages (R -S IMs) , inc luding r efer ence codes and sev erity lev els, display ed by R emote W eb Cons ole and/or logged on the hos t. F or w orld w ide tec hnical support info rmatio n, see the HP su pport website: http://www .hp.co m/support T r oublesh ooting 7 0
6 Suppor t and Ot her Resour ces R elated Doc umentati on â¢ HP Sto rage W orks XP2 4000/XP20000 Disk Arr a y Owne r's Guide â¢ Hitac hi Shado wImage â¢ for Mainf rame Us er's Guide â¢ Hitac hi T r ueCop y â¢ for Mainf rame U ser's Guide Y ou can f ind these doc uments on the HP Manuals w ebsit e: http://www .hp.co m/support/manuals In the Sto rage sec tion , cli ck St orage Software and then select a pr oduc t. C on v en tions f or St or age C apac it y V alues HP XP stor age s y stems us e the follo w ing values t o calculate ph y sical s tor age capac ity values (har d disk dri v es): â¢ 1 KB (kilobyt e) = 1, 000 byt es â¢ 1 MB (megab yte) = 1, 000 2 byt es â¢ 1 GB (gigab yte) = 1, 000 3 byt es â¢ 1 TB (ter ab yte) = 1, 000 4 byt es â¢ 1 PB (petab yte) = 1, 000 5 byt es HP XP stor age s y stems us e the follo w ing values t o calculate logi cal stor age capac ity value s (logical dev i ces): â¢ 1 KB (kilobyt e) = 1, 0 2 4 bytes â¢ 1 MB (megab yte) = 1, 0 2 4 2 byt es â¢ 1 GB (gigab yte) = 1, 0 2 4 3 byt es â¢ 1 TB (ter ab yte) = 1, 0 2 4 4 byt es â¢ 1 PB (petab yte) = 1, 0 2 4 5 byt es â¢ 1 block = 512 b ytes HP T echni cal Suppo r t F or w orld w ide tec hnical support info rmatio n, see the HP su pport website: http://www .hp.co m/support Bef or e contacting HP , collect the follo w ing info rmation: â¢ Pr oduct model names and n umbers â¢ T ec hnical support r egistr ation n umber (if applica ble) â¢ Pr oduct ser ial n umbers XP2 4000/XP20000 V olume Secur ity User's Gui de 71
â¢ Err or mes sages â¢ Oper ating sy st em type and r ev ision le v el â¢ Detailed ques tions Sub sc r ipti on Se r v i ce HP r ecommends that y ou r egister y our pr oduct at the Sub scr iber âs C hoi ce for Bu siness w ebsite: http://www .hp.co m/go/e -updates After r egist ering , y ou w ill rece iv e email notif icati on of pr oduct e nhancements, ne w dr iv er v ersi ons, fir m war e updates , and other pr oduct r es our ces. HP W ebsite s F or additio nal infor mation , see the fo llow ing HP w ebsites: â¢ http://www .hp.co m â¢ http://www .hp.co m/go/stor age â¢ http://www .hp.co m/support/manuals â¢ http://www .hp.co m/stor age/spock Doc umen tati on F eedback HP w elcomes y our feedbac k. T o make comments and sugge stions a bout pr oduct doc umentati on, s end a message t o stor agedocsF eedbac k@hp .com . All submis sions become the pr operty of HP . Support and Other Re sour ces 7 2
A Ac r on yms and Abbr e v iations T able 1 Acron yms and Abbre viations logical de vi ce LDEV logical disk contr oller LDK C main vo lume M- V OL Multiple Virtual St orage (IB M) MVS perso nal computer PC prin ted cir c uit board PCB r emote serv ice infor mation mes sage R -S IM r emote vo lume R- V OL HP Stor age W orks XP B usiness C opy So ftwar e SI servi ce infor mation mes sage S IM Shado wImage for Mainfr ame SIz servi ce pr ocessor S VP HP Stor age W orks XP C ontinuo us Acces s Softwar e T C T r ueCopy f or Mainfr ame T Cz T r ueCopy As y nchr onous f or Mainfr ame T CzA tar get volume T -V OL XP2 4000/XP20000 V olume Secur ity User's Gui de 7 3
Ac ron y ms and Abbr ev iatio ns 7 4
Inde x A access gr oup , 9 Add/Change Ho st dialog bo x , 2 7 Add/Change Ho st Gr oup dialog bo x , 2 4 Add/Change LDE V Grou p dialog bo x, 2 6 Add/Change S ecur ity Gr oup dialog bo x , 21 C con venti ons stor age capac ity values , 71 D dev i ce emulation ty pes, 13 dialog bo x es Add/C hange Host dialog bo x , 2 7 Add/C hange Host Gr oup dialog bo x , 2 4 Add/C hange LDEV Grou p dialog bo x, 2 6 Add/C hange Secur ity Grou p dialog box , 21 Err or Detail di alog box , 4 2 Host Gr ou p to P or t dialog bo x , 3 7 Host Gr ou p to Sec urity Gr oup dialog bo x , 3 6 Host t o LDEV dialog bo x, 3 5 Host t o Secur ity Gr oup dialog bo x , 3 3 LDEV Gr oup to Sec ur ity Grou p dialog bo x, 41 LDEV to Hos t dialog bo x, 3 9 LDEV to Sec ur ity Group di alog box , 3 8 Select LDE V dialog bo x, 2 9 Select P or t dialog bo x , 31 Spec ify Sec urity Gr oup dialog bo x , 3 2 doc ument r elated doc umentatio n, 71 doc umentatio n HP w ebsite , 71 pr ov iding f eedback , 7 2 E emulati on types vo lume (dev ice), 13 Err or Detail di alog box , 4 2 G Gr oups max qty host and v ol, 7 GUI, 15 H help obtaining , 71 Host gr ou p max imum possible n umber , 7 host gr ou p cr eating , 9, 11, 4 7 max imum possible n umber , 14 r egister ing hosts in , 4 8 r egister ing in sec urity gr oup , 5 3 Host Gr ou p to P or t dialog bo x , 3 7 Host Gr ou p to Sec urity Gr oup dialog bo x , 3 6 Host t o LDEV dialog bo x, 3 5 Host t o Secur ity Gr oup dialog bo x , 3 3 hosts max imum possible n umber , 14 HP techni cal support , 71 I icons in the Add/C hange Host dialog bo x , 2 8 L La unching V olume Sec urity , 4 3 LDEV , 9 LDEV gr oup cr eating , 50, 5 3 max imum possible n umber , 14 r egister ing in sec urity gr oup , 5 3 , 5 6 r egister ing volume s in, 51, 5 4 LDEV Gr oup to Sec ur ity Grou p dialog bo x, 41 LDEV sec urity , 9 LDEV to Hos t dialog bo x, 3 9 LDEV to Sec ur ity Group di alog box , 3 8 logical de v ice , 9 XP2 4000/XP20000 V olume Secur ity User's Gui de 7 5
P pool gr oup , 11 port-leve l secur ity o verv ie w , 10 R R -V OL , 12 r elated doc umentatio n, 71 S secondary vo lume, 12 Sec urity disabling , 5 8 polic y , 7 sec urity enabling the spec if ied ho sts to access vo lumes, 4 7 e xample , 10, 11, 12 pr ohibiting all ho sts fr om accessing LDE Vs, 5 3 pr otecting v olumes f r om copy oper ations , 5 7 sec urity gr oup cla ssifying as a poo l gro up , 5 5 cla ssifying as an acce ss gr oup , 5 2 cr eating , 5 2 , 5 5 max imum possible n umber , 14 r egister ing a host gr ou p in, 5 3 r egister ing an LDEV gr oup in , 5 3 , 5 6 Select LDE V dialog bo x, 2 9 Select P or t dialog bo x , 31 Spec ify Sec urity Gr oup dialog bo x , 3 2 stor age capac ity values con venti ons, 71 stor age s y stems supported models , 7 Subsc r iber's Cho ice , HP , 7 2 T T -V OL , 12 tec hnical support , 7 2 HP , 71 V vo lume emulation ty pes, 13 V olume Secur ity gr oup max imum possible n umber , 7 V olume Secur ity windo w , 16 vo lumes max imum possible n umber , 14 W w ebsites HP , 7 2 HP Subs cr iber's Cho ice fo r Business , 7 2 pr oduct manuals , 71 w indow s V olume Secur ity windo w , 16 7 6