SmartLock
What it is:
SmartLock is based on WORM (Write Once Read Many) approach. It provides non-rewritable, non-erasable feature which helps in protecting your data against accidental or intentional erasure. It is very useful for archived files that you need to retain for audit & compliance purpose; specially in Banking and Healthcare business units.
Advantage:
It helps you in storage space savings as you protect data at the directory level while in traditional WORM backup complete tape is utilized.
Steps to configure:
1) Check the license:
# isi license
2) Set the compliance clock
# isi worm cdate set
3) Create the root folder - All subfolders and files adopt the same retention settings as the root folder. So carefully decide your File System Hierarchy
# isi worm mkdir --path=<path of the file system>
3) Set the retention period
# isi worm modify --default-retention <time period> --min-retention <time period> -- max-retention <time period> --autocommit-offset <time period>--path=<file system path>
Note: Time period=4Y/ 3M ( 4 years / 3 months )
4) View SmartLock directory:
# isi worm domains list
# isi worm domains view <path>
5) Commit a file to a WORM state through UNIX;
# chmod ugo-w <file system path>
6) Commit a file to a WORM state through Windows Explorer:
# Select file/folder
# Righ-click and go to properties and then general tab
# Select Read-Only option and click OK
7) Delete a file committed to a WORM state
you can delete WORM committed file before expiration date using root or compliance administrator privilege.
Use the below command to set the privilege option for a particular directory:
# isi worm domains modify --path=<file system path> --privileged-delete true
Note: If privilege-delete option is OFF then you can't delete file until retention period is over.
8) View the status of WORM files:
# isi worm files view <path>
Also read: Design your own file-system
Happy Learning!
Hello Piyush,
ReplyDeleteI created a SmartLock domain for a folder path. When I go to commit it, I get a message saying "Folder is not Empty". When I try the same with other folder for SmartLock, it works. What could the problem be?
Thanks
Frank