Suspending and Resuming Rekey and/or Scan Phase
The QoS schedule specifies certain time windows when LDT operations must be stopped temporarily. However, you can also suspend or resume LDT at the host/client level at any time.
To suspend LDT through the CipherTrust Manager Console:
-
Open the CTE application.
-
Click Clients in the left-hand menu bar.
-
Click the Client Name of the client on which you want to pause LDT in the Clients table.
-
In the Client Details area, click the Suspend button next to the Live Data Transformation field to suspend all LDT operations on the client.
After you pause LDT, the button turns into a Play button so that you can resume LDT operations when ready.
Considerations
-
Disabling, or unguarding, an LDT GuardPoint where a rekey is in progress automatically suspends the LDT rekey operation.
-
You can also use the
voradmin suspend/resume
command in Windows Powershell to suspend and resume the rekey. However, if you use thevoradmin ldt suspend
command to pause the rekey process, the LDT suspended state is not retained when the system reboots. If you want to retain the state after reboot, suspend the rekey from the CipherTrust Manager. -
On Linux, you can pause LDT during the scan phase of LDT. When paused during scan, LDT suspends operations that traverse through the namespace of GuardPoints in the scan phase of transformation. Suspending LDT during scan stops file lookup operations of LDT. This eliminates performance impact to I/O intensive production workloads, such as file serving type workloads, that access large number of files.