Suspending and Resuming Rekey and/or Scan Phase

The QoS schedule specifies certain time windows when CTE-LDT operations must be stopped temporarily. However, you can also suspend or resume CTE-LDT at the host/client level at any time.

To suspend CTE-LDT through the CipherTrust Manager Console:

1. Open the CTE application.

2. Click Clients in the left-hand menu bar.

3. Click the Client Name of the client on which you want to pause CTE-LDT in the Clients table.

4. In the Client Details area, click the Suspend button next to the Live Data Transformation field to suspend all CTE-LDT operations on the client.

   

   After you pause CTE-LDT, the button turns into a Play button so that you can resume CTE-LDT operations when ready.

Considerations

• Disabling, or unguarding, an CTE-LDT GuardPoint where a rekey is in progress automatically suspends the CTE-LDT rekey operation.

• You can also use the voradmin suspend/resume command in Windows Powershell to suspend and resume the rekey. However, if you use the voradmin ldt suspend command to pause the rekey process, the CTE-LDT suspended state is not retained when the system reboots. If you want to retain the state after reboot, suspend the rekey from the CipherTrust Manager.

• On Linux, you can pause CTE-LDT during the scan phase of CTE-LDT. When paused during scan, CTE-LDT suspends operations that traverse through the namespace of GuardPoints in the scan phase of transformation. Suspending CTE-LDT during scan stops file lookup operations of CTE-LDT. This eliminates performance impact to I/O intensive production workloads, such as file serving type workloads, that access large number of files.