text: Consider the following points regarding encryption keys: 
  
  (cid:2) Keys are unique for each object, and they are created when the object is created. 
  
  (cid:2) Two types of keys are defined in the system: 
  
  – Master access key: 
  
  (cid:129) The master access key is created when encryption is enabled. 
  
  (cid:129) The master access key can be stored on USB flash drives, key servers, or both. 
  One master access key is created for each enabled encryption key provider. 
  
  It can be copied or backed up as necessary. 
  
  It is*not*permanently stored anywhere in the system. 
  
  It is required at boot time to unlock access to encrypted data. 
  
  – Data encryption keys (one for each encrypted object): 
  
  (cid:129) Data encryption keys are used to encrypt data. When an encrypted object (such as 
  an array, a pool, or a child pool) is created, a new data encryption key is generated 
  for this object. 
  
  (cid:129) Managed disks (MDisk) that are not self-encrypting are automatically encrypted by 
  using the data encryption key of the pool or child pool to which they belong. 
  
  (cid:129) MDisks that are self-encrypting are not reencrypted by using the data encryption 