Data Encryption Key (DEK) Retention Time

Each volume has its own DEK. Once a volume and its snapshots have been deleted, the cluster will also remove the DEK associated with the volume. The DEK is not removed immediately and will be deleted after a user-configurable retention period. The default out-of-the-box retention period is seven days. It is not recommended to set the retention time to lower than seven days or higher than 30 days.

This can be configured using the cluster-configuration CLI. For additional information, see lbcli update cluster-config (2.2 and above).

Example

Set the DEK retention period to 10 days: