1. 1© Copyright 2016 EMC Corporation. All rights reserved.1 SCALEIO D@RE WITH CLOUDLINK

2. 2© Copyright 2016 EMC Corporation. All rights reserved. Many ScaleIO customers asking for D@RE: Finance Healthcare Government Other regulated industries External key management is critical! Single pane of glass encryption management Centralized key storage = improved security Automated / reliable key backup Integration with HSM for high assurance keys DATA AT REST ENCRYPTION FOR SCALEIO BUSINESS DRIVERS D@RE?

3. 3© Copyright 2016 EMC Corporation. All rights reserved. EMC SCALEIO Software-Defined Server SAN Supports Any Application at Any Scale Traditional, Modern or Cloud Supports Any Application at Any Scale Traditional, Modern or Cloud

4. 4© Copyright 2016 EMC Corporation. All rights reserved. SCALEIO COMPONENTS Application(s) SDC: ScaleIO Data Client SDS: ScaleIO Data Server MDM: Metadata Manager CS PRESENTATION LAYER ScaleIO Data Client (SDC) DATA SERVER ScaleIO Data Server (SDS) ScaleIO Metadata Manager (MDM)

5. 5© Copyright 2016 EMC Corporation. All rights reserved. D@RE FOR SCALEIO Encrypt and monitor ScaleIO devices Transparent to ScaleIO features Encrypt some or all storage pools Leverage native OS encryption Policy-based key release Flexible key management ScaleIO Data Server SIMPLE TO DEPLOY & MANAGE DATA AT REST ENCRYPTION S

6. 6© Copyright 2016 EMC Corporation. All rights reserved. SUPPORTED DEPLOYMENT MODELS HYPER-CONVERGED ETH/IB APPS & STORAGE CCC C S SCALEIO DATA CLIENTSCALEIO DATA SERVER SSS ESXi SVM … HYPERVISOR C S STORAGE-ONLY ETH/IB APPS STORAGE C S SCALEIO DATA CLIENTSCALEIO DATA SERVER SSS CCC

7. 7© Copyright 2016 EMC Corporation. All rights reserved. INFRASTRUCTURE AGNOSTIC Hardened virtual appliance providing policy-based key management & monitoring Light-weight Linux agent leveraging dm-crypt for encryption ScaleIO software (available today) VxRack FLEX Node (coming soon) VxRack System 1000 with FLEX Nodes (coming soon)

8. 8© Copyright 2016 EMC Corporation. All rights reserved. CloudLink Center (key manager) VM that runs on a server (ESX / Hyper-V) that is able to access ScaleIO cluster Can be run as a VM on ScaleIO mgmt. server Separate installation and mgmt. GUI – not integrated w/ ScaleIO GUI Users manage (turn on / off) encryption using CloudLink Center (on individual device basis) Secure and redundant saving of keys and credentials – in CloudLink Vault (Lockbox) which is HSM compatible CloudLink SecureVM agent Software that needs to be deployed on SDS (on SVM in ESX, and on physical Linux machines) SecureVM agent uses Linux OS encryption capabilities to encrypt SDS devices A unique key is used to encrypt each device COMPONENTS

9. 9© Copyright 2016 EMC Corporation. All rights reserved. Encryption can be initiated either from CloudLink Center or the SecureVM Agent command line on the SDS machine. Once encryption is turned-on, the SecureVM agent requests key from CloudLink Center. CloudLink Center assesses the request based on configured policy and will automatically provide the key to the agent. SecureVM agent then encrypts / decrypts data transparently (does not affect SDS operation). REST APIs allow programmatic access to all CloudLink Center functionality Uses Linux native encryption Leverages AES-NI for crypto acceleration NOTE: Not supported with ScaleIO Free & Frictionless HOW IT WORKS

10. 10© Copyright 2016 EMC Corporation. All rights reserved. FLEXIBLE KEY MANAGEMENT Amazon S3 3 rd Party Key Managers (roadmap) KMIP Optional External Key Stores Benefits No lock-in to proprietary solutions No additional cost incurred Leverages existing key management investment HSMs CloudLink Vault Future

11. 11© Copyright 2016 EMC Corporation. All rights reserved. MasterSlave Master CLOUDLINK CENTER HIGH AVAILABILITY Heartbeat

12. 12© Copyright 2016 EMC Corporation. All rights reserved. Site 3 SINGLE PANE OF GLASS FOR D@RE Enterprise Data Center – Site 1 Encryption management across multiple sites Encryption management across multiple sites ScaleIO and VM-level encryption ScaleIO and VM-level encryption Site 2

13. 13© Copyright 2016 EMC Corporation. All rights reserved. Proof Points What Others Have to Say ScaleIO – Key Benefits MASSIVE SCALABILITY SUPREME ELASTICITY EXTREME PERFORMANCE UNPARALLELED FLEXIBILITY COMPELLING ECONOMICS Over 5 years ROI NODES Scales To EFFICIENCY Over Traditional SAN ATTAIN better performance than TRADITIONAL SAN “…we've never seen any HA shared storage perform as fast as ScaleIO has in our lab. ScaleIO has shattered records in every situation so far, pushing our testing infrastructure to its limits.” - StorageReview (Feb 2016) DATA AT REST ENCRYPTION

14. 14© Copyright 2016 EMC Corporation. All rights reserved. Arrange a demo by contacting: Tim Bramble: tim.bramble@emc.comtim.bramble@emc.com Sowmya Narayanan: sowmya.narayanan@emc.comsowmya.narayanan@emc.com NEXT STEPS

16. 16© Copyright 2016 EMC Corporation. All rights reserved.

17. 17© Copyright 2016 EMC Corporation. All rights reserved.

18. 18© Copyright 2016 EMC Corporation. All rights reserved.

19. 19© Copyright 2016 EMC Corporation. All rights reserved.

20. 20© Copyright 2016 EMC Corporation. All rights reserved.

21. 21© Copyright 2016 EMC Corporation. All rights reserved.

22. 22© Copyright 2016 EMC Corporation. All rights reserved.

23. 23© Copyright 2016 EMC Corporation. All rights reserved.

24. 24© Copyright 2016 EMC Corporation. All rights reserved.

25. 25© Copyright 2016 EMC Corporation. All rights reserved.

26. 26© Copyright 2016 EMC Corporation. All rights reserved.

27. 27© Copyright 2016 EMC Corporation. All rights reserved.