Managing lockdown mode at the instance level
You can use the Flex Appliance Console to change the lockdown mode on a Flex appliance at the instance level.
Flex Appliance includes the following lockdown modes at the instance level:
Enterprise mode
This mode adds additional access restrictions but retains a level of flexibility. In this mode:
You can create WORM storage instances.
If needed, the application administrator can disable the retention lock on backup images so that they can be expired before the specified retention date.
If the instance is on WORM storage server version 19.0.1 or later, security administrators can delete the instances only if no data is present. The application administrator must approve the deletion beforehand.
If the instance is on WORM storage server version 19.0 or earlier, security administrators can delete the instance if data is present. The application administrator does not need to approve the deletion beforehand.
Compliance mode
This mode adds the highest level of access restrictions. In this mode:
You can create WORM storage instances.
The retention lock on backup images cannot be disabled before the specified retention date.
You can delete the instances only if no data is present. If the instance is on WORM storage server version 19.0 or later, the application administrator must approve the deletion beforehand.
Note the following restrictions:
Only a security administrator can change the lockdown mode.
You can only change from enterprise mode to compliance mode. Before you change the mode, you must first delete all WORM storage instances.
To change the lockdown mode
- From the System topology page of the Flex Appliance Console, navigate to the Application instances section.
- Locate the row of the application instance for which you want to change the lockdown mode. Click Action > Change to compliance mode.
- In the Change to compliance mode popup window, enter the instance name and enter the Flex Appliance Console password. Click Change mode.
The instance mode gets updated and the details are displayed in the Application instances section.