JP2001312486A - Computer system - Google Patents

Abstract

(57) [Summary] In the present invention, in data transfer of remote copy, an encryption function having an appropriate encryption strength is selected in accordance with a transfer path and the nature of transfer data, thereby reducing encryption processing cost. The task is to Before starting remote copy, a primary storage control device inquires a transfer path information management server of an encryption strength required for concealment of remote copy data, and satisfies an encryption strength required for concealment of remote copy data. Cryptographic function 91
Among them, the encryption function 91 having the lowest encryption strength is selected, and the encryption function 91 is set with the secondary storage control device 6. After that, remote copy is started.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a remote copy function for duplicating data between storage controllers without going through a host computer. In particular, it relates to a function of encrypting transfer data between storage control devices.

[0002]

2. Description of the Related Art In order to avoid data loss in a storage device due to a disaster or the like, there is a remote copy function for duplicating the data in a storage device at a remote location.

In remote copy, a remote copy target volume is set in a primary storage control device connected to a host computer and a secondary storage control device connected to the primary storage control device, and connected to the primary storage control device. Copying is continued so that the contents of the primary volume of the primary storage device and the secondary volume of the secondary storage device connected to the secondary storage control device always match.

Japanese Patent Application Laid-Open No. H11-85408 discloses that two data can be transferred between different storage controllers without passing through a host computer.
A technique for overwriting is disclosed. In the present invention, the primary storage control device that has received the write data to which the write time has been added from the host computer transmits the write time and the write data to the secondary storage control device in the order of the write time after reporting the write data write completion to the host computer. Forward. The secondary storage control device stores the write time and write data received from the primary storage control device in a nonvolatile cache memory, and guarantees data up to a certain write time.

When the secondary storage controller is located at a remote location, a public communication line may be used for a data transfer path from the primary storage controller to the secondary storage controller. In a public communication line, the security is lower than that of a transfer path in a data center in which a storage device is installed, and the transfer data is more likely to be intercepted by a third party. To cope with this, an encryption function is added to any part between the connection point between the public communication line and the transfer path in the data center and the storage controller, and the remote copy target data flowing through the public communication line By encrypting, it is possible to make it difficult to decrypt the contents even if the data is intercepted. Since it is easier to use the encryption function according to the remote copy target data as it is closer to the transfer source of the remote copy target data, a method of incorporating the encryption function in the storage control device can be considered.

Japanese Patent Application Laid-Open No. 9-139735 discloses a technique for encrypting transfer data on a communication channel. According to the present invention, a relay service program for executing encryption is operated in a computer at a data transfer source and a computer at a transfer destination, and transmission / reception via a network is executed via the relay service program.

The difficulty in decrypting encrypted data is called encryption strength. Encryption strength, encryption algorithm, encryption,
In addition, when decrypting the encrypted data to restore the original state, it depends on the length of the key acting on the encryption algorithm and the like. Generally, when the encryption strength is increased, the time required for encryption / decryption increases. .

[0008]

In the conventional data transfer between storage controllers, encryption of the transfer data does not take into account the difference in security between transfer paths. For this reason, the encryption strength is set to be fixed, for example, high according to the least secure transfer path.

In the conventional data transfer between storage controllers, the difference in security between transfer data is not taken into account in the encryption of transfer data. For this reason, even if the host computer encrypts data using the encryption function built into the host computer and writes the data to the primary storage control device, the host computer encrypts the data again when transferring the data from the primary storage control device to the secondary storage control device. Will be transformed.

[0010] As described above, in any case, as a result of having an excessive encryption strength, the processing cost of encryption increases, and the performance of remote copy deteriorates.

An object of the present invention is to select an encryption function having an appropriate encryption strength in accordance with the transfer path and the nature of transfer data in data transfer between storage control devices, thereby reducing the encryption processing cost. It is in.

[0012]

In order to achieve the above object, a computer system according to the present invention is connected to a primary host computer, a secondary host computer, a primary host computer and a primary storage device, and has a plurality of encryption functions. Storage controller having encryption function setting processing for controlling the encryption function, and remote copy processing for transferring data for duplicating data to another storage controller, the primary storage controller and a public communication line , A secondary storage controller connected to the secondary host computer and the secondary storage device, and having a plurality of encryption functions, an encryption function setting process, a remote copy process, a primary storage control device, and public communication. A transfer path encryption strength table that is connected via a line and stores encryption strength information necessary for concealing remote copy data, and a transfer path encryption strength search process that searches the transfer path encryption strength table When the primary storage control device starts remote copy with the secondary storage control device, the primary storage control device
The transfer path information management server requests the encryption strength necessary for concealment of the remote copy data on the transfer path from the primary storage control device to the secondary storage control device. The encryption strength table is searched, and the encryption strength necessary for concealment of the remote copy data is reported on the transfer path from the primary storage control device to the secondary storage control device. The encryption function setting process of the primary storage control device The encryption function with the lowest encryption strength is selected from among the encryption functions that satisfy the encryption strength required for concealing the remote copy data on the transfer path from the to the secondary storage control device, and is selected for the encryption function setting processing of the secondary storage control device. By notifying the encryption function, the same encryption function is set in the primary storage control device and the secondary storage control device, and after the encryption function setting process ends, the primary storage control device starts the remote copy process. Ri, start a remote copy between the remote copy processing of the secondary storage control device, and wherein the.

Further, the primary host computer has a built-in host encryption function and an encryption notifying process for notifying the primary storage control device whether or not the write data has been encrypted by the host encryption function. It has stored data encryption information for storing information from the encryption notification processing of the primary host computer, and the primary storage control device and the secondary storage control device
If the primary host computer has a cryptographic function suspending process to suspend the use of the cryptographic function and a cryptographic function resuming process to resume the use of the suspended cryptographic function, the primary host computer uses the host cryptographic function when transferring write data to the primary storage controller. For the encrypted write data, information indicating whether the write data is encrypted and the encryption strength of the host encryption are added to the write data and transferred by the encryption notification processing, and the primary storage controller Stores the information indicating whether the write data is encrypted and the encryption strength in the stored data encryption information together with the write data, and the remote copy processing of the primary storage control device performs, for each data transfer unit of the remote copy, From the stored data encryption information, the remote copy data is encrypted by the host, and the encryption strength encrypted by the host indicates the remote copy data. If the encryption function is not less than the encryption strength of the encryption function being used, and if the encryption function is being used, the encryption function interruption processing of the primary storage control device is started. By notifying the encryption function suspension processing of the control device to suspend the use of the encryption function being used in the remote copy, the use of the encryption function in the primary storage control device and the secondary storage control device is suspended, and the In the remote copy process, after the encryption function interruption process of the primary storage controller is completed, the remote copy is continued, and the data transfer unit of the remote copy is not encrypted by the host or encrypted by the host but encrypted. If the strength is less than the encryption strength of the encryption function used in the remote copy, and if the encryption function is not being used, start the encryption function restart processing of the primary storage control device, The encryption function resumption processing of the storage controller is performed by notifying the encryption function resumption processing of the secondary storage controller to resume the use of the encryption function being used in the remote copy. The use of the function may be resumed, and the remote copy process of the primary storage control device may continue the remote copy after the encryption function restart process of the primary storage control device ends.

When the transfer path information management server has the encryption strength change notification processing to the primary storage control device, the transfer path information management server performs the encryption strength change notification processing by using the transfer path encryption strength of the transfer path information management server. If the encryption strength required for concealing the remote copy data is higher than the current value when the table is updated, the encryption strength required for concealing the remote copy data is lower than the current value before updating the transfer path Notifies the relevant primary storage controller of the change in the encryption strength after the transfer path update, and the remote copy processing of the primary storage control apparatus performs the primary storage control according to the report from the encryption strength change notification processing of the transfer path information management server. Activate the encryption function setting process of the control device, set the encryption function between the primary storage control device and the secondary storage control device, and report the completion of resetting the encryption function to the transfer path information management server , It may resume the remote copy.

[0015]

(First Embodiment of the Invention) A first embodiment of the present invention will be described below with reference to the drawings.

FIG. 1 shows a control configuration. Primary storage control device 4
Is a channel interface 9 having a transfer port connected to the primary host computer 1 and the public communication line 3, a drive interface 12 connected to the primary storage device 5, and a duplex storage for storing management information of the primary storage control device 4. In this configuration, a nonvolatile management information memory 10, a duplicated nonvolatile cache memory 11 for storing data, and a maintenance terminal 13 for issuing a remote copy execution instruction are connected by a bus. The channel interface 9 has a remote copy process 92 for executing a remote copy for each volume, and a cryptographic function setting process 93 for controlling a cryptographic function 91 mounted on a path connected to a public communication line.

The configuration of the secondary storage controller 6 is the same as that of the primary storage controller 4, and is connected to the secondary host computer 2, the public communication line 3, and the secondary storage device 7.

The transfer path information management server 8 is connected to the public communication line 3 and, when performing remote copy, a transfer path encryption strength table 82 for storing encryption strength required for concealing data.
And a transfer path encryption strength search process 81 for searching the transfer path encryption strength table 82 from the designated primary storage control device 4 and secondary storage control device 6.

FIG. 2 shows an example of the transfer path encryption strength table 82. Primary storage controller 4 for executing remote copy
From the information such as the product number of the secondary storage controller 6 and the storage controller that can uniquely identify the storage controller, data is transferred on the transfer path when remote copying is performed between the primary storage controller 4 and the secondary storage controller 6. You can search the encryption strength required for secrecy. In FIG. 2, i primary storage controllers 4 and j secondary storage controllers 6 are registered.

FIG. 3 shows a flow until the remote copy processing 92 is started.

First, from the maintenance terminal 13 of the primary storage control device 4 and the secondary storage control device 6, a partner storage control device, a volume, a transfer port, a transfer direction, and the like are designated as information necessary for remote copy (step). S201).

Next, the encryption function setting process 93 of the primary storage control device 4 is started (step S202).

FIG. 4 shows the flow of the encryption function setting process 93.

Since it is the transfer port of the primary storage controller 4, the process proceeds to step Y301 (step S301), and requests the transfer path information management server 8 for an encryption strength necessary for concealing the remote copy data (step S302). The transfer path information management server 8 starts transfer path encryption strength search processing 81.

FIG. 5 shows the flow of the transfer path encryption strength search processing 81.

First, the transfer path encryption strength table 82 is searched from the transfer source primary storage control device 4 and the transfer destination secondary storage control device 6, and the encryption strength necessary for concealing the remote copy data is determined (step S401). .

Next, the determined encryption strength is reported to the primary storage control device 4 (step S402).

As described above, FIG.
1 is shown.

Returning to the encryption function setting process 93 in FIG.
The encryption strength is received from the transfer path information management server 8 (step S303), and the encryption function 91 having the lowest encryption strength among the encryption functions 91 having the encryption strength not less than the received encryption strength is received.
Is selected (step S304). Next, the selected encryption function 91 is notified to the secondary storage control device 6 (step S3).
05).

In the secondary storage controller 6, the encryption function setting process 93 is started, and since it is the transfer port of the secondary storage controller 6, (Step S 301) proceeds to the N side to select the primary storage controller 4. The notification of the encryption function 91 is received (step S308), and the same encryption function 91 as the primary storage control device 4 is received.
Is selected, and the encryption function 91 is set (step S30).
9), the completion of the encryption function setting is reported to the primary storage control device 4 (step S310).

The encryption function setting process 93 of the primary storage control device 4
Then, the encryption function setting completion report is received from the secondary storage control device 6 (step S306), and the encryption function 91 selected earlier is set (step S307).

The flow of the encryption function setting process 93 in FIG. 4 has been described above.

Returning to the flow up to the start of the remote copy processing 92 in FIG. 3, the remote copy processing 92 of the primary storage control device 4 for the remote copy designated volume is started (step S203).

FIG. 6 shows the flow of the remote copy process 92.

Remote copy processing 9 of primary storage controller 4
2 proceeds to (Step S501) Y side, and the maintenance terminal 1
Until there is an interruption request from the server 3 (step S502), if there is data to be transferred (step S503), the data to be transferred is determined (step S504), and the data is transferred to the secondary storage control device 6 (step S505). repeat. On the other hand, the remote copy processing 92 of the secondary storage control device 6 proceeds to (N in step S501) until the maintenance terminal 13 receives an interruption request (step S50).
6) If there is transfer data from the primary storage control device 4, the transfer data is received, and the secondary storage device 7 is
(Step S507) is repeated.

FIG. 6 shows the flow of the remote copy process 92.

FIG. 3 shows the flow until the remote copy process 92 is started.

(Second Embodiment of the Invention) Hereinafter, a second embodiment of the present invention will be described.

In order to avoid repetition of the description, parts different from the first embodiment of the present invention will be described.

FIG. 7 shows a control configuration. Primary host computer 1
Has a host encryption function 14 and an encryption notification process 15.
When transferring the write data to the primary storage controller 4, the primary host computer 1 encrypts the write data by the encryption notifying process 15 for the write data encrypted by the host encryption function 14 built in the primary host computer 1. Information indicating whether the encryption has been performed, and the encryption strength of the host encryption.
The data is transferred after being added to the write data.

The primary storage control device 4 sets information indicating whether the write data has been encrypted and the encryption strength in the stored data encryption information 16 in the management information memory 10. FIG. 8 shows an example of the stored data encryption information 16. Each cylinder has information indicating whether the entire cylinder is encrypted and information indicating the minimum encryption strength in the cylinder when the entire cylinder is encrypted. The information is provided in cylinder units in order to reduce the capacity of the stored data encryption information 16. If it is not necessary to reduce the capacity of the stored data encryption information 16, the information may be stored in units smaller than cylinders such as trucks.

FIG. 9 shows the remote copy process b94.

The data to be transferred is determined (step S8)
04) Thereafter, it is determined from the stored data encryption information 16 whether the data to be transferred is encrypted and the encryption strength is equal to or higher than the encryption strength set for the encryption function (step S).
805) If the above condition is satisfied and the encryption function 91 is being used (step S806), the encryption function interruption process 95 is started.

FIG. 10 shows the encryption function interruption processing 95.

Since the port is the transfer port of the primary storage controller 4, the process proceeds to step Y901 (step S901) to notify the secondary storage controller 6 that the use of the encryption function 91 has been interrupted (step S901).
902).

On the secondary storage control device 6 side, the encryption function suspending process 95 is activated and, since it is a transfer port of the secondary storage control device 6, the process proceeds to step S 901 to the N side, and the encryption from the primary storage control device 4 is performed. Upon receiving the notification of the interruption of the use of the function 91 (step S905), the setting information of the currently used encryption function 91 is saved in the management information memory 10, and the encryption function 91 is saved.
Is suspended (step S906), and the completion of use suspension of the encryption function 91 is reported to the primary storage control device 4 (step S907).

The encryption function interruption processing 95 of the primary storage control device 4
Then, a report of the completion of use interruption of the encryption function 91 is received from the secondary storage control device 6 (step S903), the setting information of the encryption function 91 being used is saved in the management information memory 10, and the encryption function 91 Suspend use (step S90)
4).

FIG. 10 shows the cryptographic function interruption processing 95.

Returning to the remote copy process b94 in FIG. 9, if the condition that the data to be transferred is encrypted and the encryption strength is not less than the encryption strength set for the encryption function is not satisfied, If the function 91 is not being used (step S808), the encryption function restart processing 96 is started.

FIG. 11 shows the encryption function restart processing 96.

Since the port is the transfer port of the primary storage controller 4, the process proceeds to step Y100 (step S1001) to notify the secondary storage controller 6 of the resumption of the use of the encryption function 91 (step S1002).

On the secondary storage control device 6 side, the encryption function resuming process 96 is started and, since the transfer port is the secondary storage control device 6, the process proceeds to step S 1001 to the N side, and the encryption from the primary storage control device 4 is performed. Upon receiving the notification of the resumption of the use of the function 91 (step S1005), the use of the encryption function 91 is resumed based on the setting information of the encryption function 91 saved in the management information memory 10 (step S1006).
Report the completion of use of the encryption function 91 to the user (step S
1007).

The encryption function restart processing 96 of the primary storage control device 4
Then, the report of the completion of the use of the encryption function 91 from the secondary storage control device 6 is received (step S1003), and the use of the encryption function 91 is restarted based on the setting information of the encryption function 91 saved in the management information memory 10. (Step S100
4).

FIG. 11 shows the encryption function restart processing 96.

FIG. 9 shows the remote copy process b94.
showed that.

(Third Embodiment of the Invention) Hereinafter, a third embodiment of the present invention will be described.

In order to avoid repetition of the description, parts different from the first embodiment of the present invention will be described.

FIG. 12 shows a control configuration. The transfer path information management server 8 has an encryption strength change notification process 83 for notifying the primary storage control device 4 that the update has occurred in the transfer path encryption strength table 82 of the change in encryption strength.

FIG. 13 shows a procedure for changing the transfer path and changing the transfer path encryption strength table 82.

First, the transfer path encryption strength table 82 is changed (step S1201). Next, it is determined whether the changed transfer path requires a higher encryption strength (step S).
1202).

If the transfer path after the change requires a higher encryption strength, the encryption strength change notification processing 83 sends the encryption strength change to the primary storage control device 4 related to the change in the transfer path encryption strength table 82. Notify (step S120)
3).

FIG. 14 shows the remote copy process c97.

Before determining whether there is data to be transferred, it is checked whether there is an encryption strength change notification from the transfer path information management server 8 (step S1303). If there is the notification, the encryption function setting process 93 is executed (step S1304),
The completion of resetting of the encryption function is reported to the transfer path information management server 8 (step S1305).

FIG. 14 shows the remote copy processing c9.
7 was indicated.

Returning to the procedure for changing the transfer path and changing the transfer path encryption strength table 82 in FIG.
The process 83 receives the report of the completion of the resetting of the encryption function from the primary storage control device 4 (step S1204). Finally, the transfer path is changed (step S1205).

If the transfer path after the change requires lower encryption strength, the steps are executed in the order of (step S1205) → (step S1203) → (step S1204) (steps S1206, S1207, S120).
8).

[0067]

According to the present invention, in data transfer between storage controllers, according to the transfer path and the nature of the transfer data,
It is possible to select an encryption function having an appropriate encryption strength and reduce the encryption processing cost.

[Brief description of the drawings]

FIG. 1 is a diagram showing a control configuration according to a first embodiment of the present invention.

FIG. 2 is a diagram illustrating an example of a transfer path encryption strength table according to the first embodiment of this invention.

FIG. 3 is a diagram showing an example of a flow up to starting remote copy processing according to the first embodiment of this invention.

FIG. 4 is a diagram showing an example of the flow of a cryptographic function setting process according to the first embodiment of the present invention.

FIG. 5 is a diagram illustrating an example of the flow of a transfer path encryption strength search process according to the first embodiment of this invention.

FIG. 6 illustrates an example of a remote copy process according to the first embodiment of this invention.

FIG. 7 is a diagram illustrating a control configuration according to a second embodiment of the present invention.

FIG. 8 is a diagram showing an example of stored data encryption information according to the second embodiment of the present invention.

FIG. 9 illustrates an example of a remote copy process b according to the second embodiment of this invention.

FIG. 10 is a diagram illustrating an example of a cryptographic function interruption process according to the second embodiment of this invention.

FIG. 11 is a diagram illustrating an example of a cryptographic function restart process according to the second embodiment of this invention.

FIG. 12 is a diagram illustrating a control configuration according to a third embodiment of the present invention.

FIG. 13 is a diagram showing an example of a procedure for changing a transfer path and changing a transfer path encryption strength table according to the third embodiment of the present invention.

FIG. 14 illustrates an example of a remote copy process c according to the third embodiment of this invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... Primary host computer, 14 ... Host encryption function, 15 ... Encryption notification processing, 2 ... Secondary host computer, 3 ... Public communication line, 4 ... Primary storage control device, 5 ... Primary storage device, 6 ... Secondary storage control device 7: Secondary storage device, 8: Transfer path information management server, 81: Transfer path encryption strength search processing, 82: Transfer path encryption strength table, 83: Encryption strength change notification processing, 91: Encryption function, 92: Remote copy processing 93: encryption function setting processing, 94: remote copy processing b, 95: encryption function interruption processing, 96: encryption function restart processing, 97: remote copy processing c, 13: maintenance terminal, 16: stored data encryption information.

Continued on the front page (72) Inventor ▲ Taka ▼ Kuji Matsu 2880 Kozu, Kozuhara, Kanagawa Prefecture Inside the Hitachi, Ltd.Storage Systems Division (72) Inventor Masashi Nozawa 2880 Kozu, Kozu, Odawara, Kanagawa Hitachi Storage Corporation F term in the system division (reference) 5B045 BB19 BB28 BB42 BB47 BB58 GG06 JJ35

Claims (3)

[Claims] 1. A primary host computer, a secondary host computer, a primary host computer connected to a primary storage device, a plurality of cryptographic functions, a cryptographic function setting process for controlling the cryptographic functions, and data transfer to another storage control device. A primary storage control device having a remote copy process for transferring data in order to duplicate the data, connecting the primary storage control device to the primary storage control device via a public communication line, and further connecting to the secondary host computer and the secondary storage device; A secondary storage controller having a plurality of encryption functions, an encryption function setting process, and a remote copy process, and information on encryption strength required to conceal remote copy data by connecting to the primary storage controller via a public communication line. And a transfer path information management server having a transfer path encryption strength search process for searching the transfer path encryption strength table. When starting remote copying with the secondary storage control device, the control device conceals the remote copy data on the transfer path from the primary storage control device to the secondary storage control device in the transfer path information management server by the encryption function setting process. Transfer path encryption strength search processing of the transfer path information management server searches the transfer path encryption strength table, and transmits the remote copy data on the transfer path from the primary storage control device to the secondary storage control device. The encryption strength required for confidentiality is reported, and the encryption function setting process of the primary storage control unit is performed by Among them, the encryption function with the lowest encryption strength is selected, and the encryption function selected in the encryption function setting process of the secondary storage control device is notified, so that the primary storage control device and the secondary storage control device The same encryption function is set, and the primary storage controller starts remote copy with the remote copy processing of the secondary storage controller by remote copy processing after the encryption function setting processing is completed. system. 2. The primary host computer has a built-in host encryption function and an encryption notifying process for notifying the primary storage control device whether write data has been encrypted by the host encryption function. A cryptographic function suspending process in which the primary storage control device and the secondary storage control device have the stored data cryptographic information for storing the information from the encryption notification process of the primary host computer, and the primary storage control device and the secondary storage control device suspend the use of the cryptographic function. 2. The computer system according to claim 1, further comprising an encryption function resuming process for resuming use of the host computer, wherein the primary host computer, when transferring the write data to the primary storage control device, writes the write data encrypted by the host encryption function. In addition, information indicating whether the write data is encrypted and the encryption strength of the host encryption are added to the write data and transferred by the encryption notification processing. The primary storage control device stores the information indicating whether the write data is encrypted and the encryption strength in the stored data encryption information together with the write data, and the remote copy processing of the primary storage control device performs For each transfer unit, the remote copy data is encrypted by the host from the stored data encryption information, and the encryption strength encrypted by the host is equal to or greater than the encryption strength of the encryption function used in the remote copy. If the encryption function is being used, the encryption function interruption processing of the primary storage control device is started, and the encryption function interruption processing of the primary storage control By notifying that the use of the encryption function is interrupted, the use of the encryption function in the primary storage control device and the secondary storage control device is interrupted, and In the remote copy processing, after the encryption function suspension processing of the primary storage controller is completed, the remote copy is continued, and the data transfer unit of the remote copy is not encrypted by the host, or is encrypted by the host but has the encryption strength. If the encryption function is less than the encryption strength of the encryption function used in the remote copy and the encryption function is not being used, the encryption function restart processing of the primary storage controller is started, and the encryption function of the primary storage controller is restarted. The process is to notify the restart function of the encryption function of the secondary storage control device to restart the use of the encryption function used in the remote copy, thereby restarting the use of the encryption function in the primary storage control device and the secondary storage control device, 2. The calculation according to claim 1, wherein the remote copy processing of the primary storage controller continues the remote copy after the encryption function restart processing of the primary storage controller is completed. System. 3. The computer system according to claim 1, wherein the transfer path information management server has an encryption strength change notification processing to the primary storage control device, wherein the transfer path information management server has an encryption strength change notification processing. If an update occurs in the transfer path encryption strength table of the information management server, and the encryption strength required for concealing the remote copy data becomes higher than the current level, the encryption required for concealing the remote copy data before updating the transfer path If the strength is lower than the current one, after the transfer path is updated, the relevant primary storage controller is notified of the change in encryption strength, and the remote copy processing of the primary storage controller is performed by the transfer path information management server. Based on the report from the process, the encryption function setting process of the primary storage controller is started, the encryption function between the primary storage controller and the secondary storage controller is set, and the transfer path information management server The computer system according to claim 1 which reports the reconfiguration complete the No. function, characterized by restarting remote copy.