SANtricity 11.8 Commands ( CA08871-194 ~ 196 )

Set internal storage Array security key

The set storageArray securityKey command sets the security key that is used throughout the storage system to implement the Drive Security feature.

Supported Series

This command applies to any individual storage system, including the HB2100/HB2200/HB2300, HB5100/HB5200, AB6100 and AB3100 series, as long as all SMcli packages are installed.

Roles

To execute this command on an HB2100/HB2200/HB2300, HB5100/HB5200, AB6100, or AB3100 storage system, you must have the Security Admin role.

Context

When any security-capable drive in the storage system is assigned to a secured volume group or disk pool, that drive will be security-enabled using the security key. Before you can set the security key, you must use the create storageArray securityKey command to create the security key.

This command applies only to internal key management.

Syntax

set storageArray securityKey

Parameters

None.

Notes

Security-capable drives have hardware to accelerate cryptographic processing and each has a unique drive key. A security-capable drive behaves like any other drive until it is added to a secured volume group, at which time the security-capable drive becomes security-enabled.

Whenever a security-enabled drive is powered on, it requires the correct security key from the controller before it can read or write data. So, a security-enabled drive uses two keys: the drive key that encrypts and decrypts the data and the security key that authorizes the encryption and decryption processes. The set storageArray securityKey command commits the security key to all of the controllers and security-enabled drives in the storage system. The full disk encryption feature ensures that if a security-enabled drive is physically removed from a storage system, its data cannot be read by any other device unless the security key is known.

Top of Page