SANtricity 11.9 Commands ( CA08871-194 ~ 196 )

Enable volume group security

The enable volumeGroup security command converts a non-secure volume group to a secure volume group.

Supported Series

This command applies to any individual storage system, including the ETERNUS AB/HB series as long as all SMcli packages are installed.

Roles

To execute this command on the ETERNUS AB/HB series storage system, you must have the Storage Admin role.

Syntax

enable volumeGroup [volumeGroupName] security

Parameter

Parameter Description

volumeGroup

The name of the volume group that you want to place in the Security Enabled state. Enclose the volume group name in square brackets ([ ]).

Notes

These conditions must be met to successfully run this command.

  • All drives in the volume group must be full disk encryption drives.

  • The Drive Security feature must be enabled.

  • The storage system security key has to be set.

  • The volume group is Optimal, and it does not have repository volumes.

The controller firmware creates a lock that restricts access to the FDE drives. FDE drives have a state called Security Capable. When you create a security key, the state is set to Security Enabled, which restricts access to all FDE drives that exist within the storage system.

Top of Page