Lenovo ThinkServer RD330 MegaRAID SAS Software User Guide - Page 180

Chapter 5: MegaRAID Command Tool | SafeStore Security Options MegaRAID SAS Software User Guide 5.7.3 Destroy the Security Key 5.7.4 Create a Security Key 5.7.5 Drive Security Key Page 180 Use the command in the following table to destroy the security key. Table 30: Destroy the Security Key Convention Description MegaCli -DestroySecurityKey | [-Force] -aN Destroys the security key. The controller uses the security key to lock and unlock access to the secure user data. This key is encrypted into the security key blob and stored on the controller. Re-provisioning disables the security system of a device. For a controller, it involves destroying the security key. For SED drives, when the drive lock key is deleted, the drive is unlocked and any user data on the drive is securely deleted. Use the command in the following table to create a security key. Table 31: Create a Security Key Convention Description MegaCli -CreateSecurityKey -SecurityKey sssssssssss | [-Passphrase sssssssssss] |[-KeyID kkkkkkkkkkk] -aN Creates a security key based on a user-provided string. The controller uses the security key to lock and unlock access to the secure user data. This key is encrypted into the security key blob and stored on the controller. If the security key is unavailable, user data is irretrievably lost. You must take all precautions to never lose the security key. -CreateSecurityKey: Creates the security key. -SecurityKey sssssssssss: Enters the new security key. The security key is case-sensitive. It must be between eight and thirty-two characters and contain at least one number, one lowercase letter, one uppercase letter, and one non-alphanumeric character (e.g. < > @ +). The space character is not permitted. [-Passphrase sssssssssss]: Enters the new passphrase.The pass phrase is case-sensitive. It must be between eight and thirty-two characters and contain at least one number, one lowercase letter, one uppercase letter, and one non-alphanumeric character (e.g. < > @ +). The space character is not permitted. If you want to use the security key using EKMS, the EKMS must provide the security key. You can create a security key using EKMS, or switch from EKM to LKM, or from LKM to EKM. Table 32: Drive Security Key Convention Description Convention Description Convention Description Convention Description MegaCli -CreateSecurityKey useEKMS -aN Creates security key using EKMS. MegaCli -ChangeSecurityKey -SecurityKey sssssssssss [-Passphrase sssssssssss] | [-KeyID kkkkkkkkkkk] -aN To change the security from EKMS to LKM. MegaCli -ChangeSecurityKey useEKMS -OldSecurityKey sssssssssss -aN To change security from LKM to EKM. MegaCli -ChangeSecurityKey -useEKMS -aNrekeying in EKMS