SANtricity 11.8 Commands ( CA08871-194 ~ 196 )

Enable external security key management

The enable storageArray externalKeyManagement file command enables external security key management for a storage system that has Full Disk Encryption drives, and creates the initial drive security key.

Supported Series

This command applies to an individual HB2100/HB2200/HB2300, HB5100/HB5200, AB6100 or AB3100 storage system.

Roles

To execute this command on an HB2100/HB2200/HB2300, HB5100/HB5200, AB6100, or AB3100 storage system, you must have the Security Admin role.

Context

This command applies only to external key management.

Syntax

enable storageArray externalKeyManagement
file="fileName"
passPhrase="passPhraseString"
saveFile=(TRUE | FALSE)

Parameters

Parameter Description

file

The file path and the file name where the new security key will be stored. Enclose the file path and the file name in double quotation marks (" "). For example:

file="C:\Program Files\CLI\sup\drivesecurity.slk"

The file name must have an extension of .slk.

passPhrase

A character string that encrypts the security key so that you can store the security key in an external file. Enclose the pass phrase character string in double quotation marks (" ").

saveFile

Verifies and saves the security key to a file. Set to FALSE to not save and verify the security key to a file. The default value is TRUE.

Notes

Your pass phrase must meet these criteria:

  • Must be between eight and 32 characters long.

  • Must contain at least one uppercase letter.

  • Must contain at least one lowercase letter.

  • Must contain at least one number.

  • Must contain at least one non-alphanumeric character, for example, < > @ +.

If your pass phrase does not meet these criteria, you will receive an error message.

Minimum firmware level

8.70 adds the saveFile parameter.

Top of Page