You can add a storage group to QoreStor through either the QoreStor GUI or the command line interface. In both cases, when creating a storage group you define the name and compression level.

Adding a storage group through the GUI

To add a storage group, complete the following steps.

1. In the navigation menu, click Local Storage to expand the menu, then click Storage Groups.
2. Click Add Storage Group. The Add a Storage Group pane is displayed.
3. In the Name field, enter a name for the storage group.
4. Select a Compression Type from the drop-down list:
   • Fast — Results in shorter backup time, but with less space savings.
   • Best — Provides the highest space savings, but with a longer backup time.
5. Optionally, configure a Quota by entering an amount and setting the unit (GiB or TiB). If no value is set, the quota will be unlimited.

   NOTE: Quotas define the limit for limit for physical capacity usage. Once reached, data ingests are not allowed until space is recovered through savepoint expiration and cleaner operations.

6. To apply encryption, select Encryption and enter the following:
   • Passphrase — the passphrase is user-defined and is used to generate a passphrase key that encrypts the file in which the content encryption keys are kept. The passphrase is a human readable key, which can be up to 255 bytes in length. It is mandatory to define a passphrase to enable encryption.

     NOTE: It is mandatory to define a passphrase to enable encryption. If the passphrase is compromised or lost, the administrator should change it immediately so that the content encryption keys do not become vulnerable.

   • Confirm Passphrase — re-enter the passphrase used above.
   • Encryption Mode — Select either static or internal.
     • static - A global mode of key management in which a fixed key is used to encrypt all data.
     • internal - A mode of key lifecycle management in which the keys are periodically generated and rotated. The minimum key rotation period before the content encryption key can be rotated and a new key is generated is 7 days. This rotation period is user-configurable and can be specified in days.

   NOTE: Refer to Configuring and Using Encryption at Rest for more information about encryption.

   NOTE: Due to export regulations, the encryption at rest feature is not available in certain markets, and, therefore, may not be available in your locale. For more information about recommended guidelines for encryption, see Understanding Encryption at Rest

   NOTE: After encryption is enabled, all of the data that is backed up is encrypted and is kept encrypted until it is expired and cleaned by the system cleaner. Note that encryption is an irreversible process.

7. Click Add

Adding a storage group through the command line

To add a storage group, complete the following steps.

2. Access the QoreStor CLI. Refer to Using the QoreStor command line for more information.
2. Add a new storage group using the command

   storage_group --add --name <name> [--compression_mode <fast|best>] [--quota <Quota value in GiB or TiB>]

   Refer to the QoreStor Command LIne Reference Guide for more information

3. To apply encryption to the data in this storage group, use the command:

   storage_group --encryption --name <name> [--set <ON | OFF>] [--mode <static|internal> <--interval <7 days to 70 years>]

   For more information, refer to the Storage Group commands section of the QoreStor Command Line Reference Guide.

   NOTE: Due to export regulations, the encryption at rest feature is not available in certain markets, and, therefore, may not be available in your locale. For more information about recommended guidelines for encryption, see Understanding Encryption at Rest

   NOTE: It is mandatory to define a passphrase to enable encryption. If the passphrase is compromised or lost, the administrator should change it immediately so that the content encryption keys do not become vulnerable.

   NOTE: After encryption is enabled, all of the data that is backed up is encrypted and is kept encrypted until it is expired and cleaned by the system cleaner. Note that encryption is an irreversible process.