Your customer is using 2 HPE StoreOnce appliances across 2 sites with replication enabled for disaster recovery. They are concerned about the fact…

HPE StoreOnce Systems include a security feature called Dual Authorization. This feature is designed to prevent a single administrator from performing critical, potentially destructive actions, such as deleting backup data (e.g., Catalyst stores, NAS shares, VTL libraries). When enabled, any such action initiated by one administrator must be approved by a second, authorized user with the "Security Officer" role before it can be executed. This directly addresses the customer's concern about a single point of administrative control leading to data loss.

B. Challenge Handshake Authentication Protocol (CHAP): CHAP is an authentication protocol, primarily used for iSCSI, to verify a user's or host's identity. It does not control the actions an authenticated administrator can perform.

C. Data at rest encryption: This feature encrypts data on the physical disks, protecting it from unauthorized access if the drives are stolen. It does not prevent an authorized administrator from deleting the data.

D. Resource restriction policies: This is a generic term. The specific, named feature in HPE StoreOnce that implements a two-person rule for critical operations is Dual Authorization, making it the most accurate answer.

1. HPE StoreOnce Systems Security Guide (for HPE StoreOnce 4.3.2)

Page 31, "Dual Authorization": "Dual Authorization provides a mechanism to protect critical data from accidental or malicious deletion by a single administrator. When enabled, critical operations require approval from a second, independent Security Officer before they can be completed." This section explicitly details how the feature addresses the scenario in the question.

2. HPE StoreOnce 3660, 5260, and 5660 Systems User Guide (for software version 4.3.2)

Page 151, "About users, roles, and permissions": This section describes the different user roles, including the "Security Officer" role, which is essential for the Dual Authorization workflow. It states, "The Security Officer role is required to enable and use the Dual Authorization feature."

3. HPE StoreOnce Systems Concepts and Configuration Guide (for HPE StoreOnce 4.3.0)

Page 28, "Security features": "Dual Authorization for critical operations — Requires two authorized users to approve critical operations, such as deleting a Catalyst store or VTL library, to protect against malicious or accidental data deletion." This confirms the purpose and function of the feature.