Data encryption is supported for S2D and PowerFlex CSVs, but the approach for each configuration differs. In the APEX Cloud Platform for Azure, each S2D CSV is encrypted by default using BitLocker. BitLocker is a Windows security feature that provides encryption for entire volumes, addressing the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned devices.
BitLocker is not supported on PowerFlex CSVs, and it must not be enabled on these volumes. If you need to encrypt PowerFlex volumes, Dell offers support for CloudLink. CloudLink provides software-based Data at Rest Encryption (D@RE) that is transparent to the features and operation of the Dell PowerFlex software. It uses dm-crypt, a proven high-performance volume encryption solution that is widely implemented for Linux machines. CloudLink must be deployed outside of the APEX Cloud Platform for Azure on separate infrastructure.