Avago Technologies MegaRAID Fast Path Software - Manual (Page 229)

LSI Corporation Confidential | July 2011 Page 229
MegaRAID SAS Software User Guide Chapter 5: MegaRAID Command Tool | SafeStore Security Options
5.7.4 Create a Security Key Use the command in the following table to create a security key.
5.7.5 Create a Drive Security Key If you want to use the security key using electronic key management system (EKMS),
the EKMS must provide the security key. You can create a security key using EKMS, or
switch from EKM to LKM, or from LKM to EKM.
Table 41: Create a Security Key
Convention MegaCli -CreateSecurityKey -SecurityKey sssssssssss |
[-Passphrase sssssssssss] |[-KeyID kkkkkkkkkkk] -aN
Description Creates a security key based on a user-provided string. The controller uses
the security key to lock and unlock access to the secure user data. This key is
encrypted into the security key blob and stored on the controller. If the
security key is unavailable, user data is irretrievably lost. You must take all
precautions to never lose the security key.
-CreateSecurityKey : Creates the security key.
-SecurityKey sssssssssss : Enters the new security key. The security
key is case-sensitive. It must be between 8 and 32 characters and contain at
least one number, one lowercase letter, one uppercase letter, and one
non-alphanumeric character (e.g. < > @ +). The space character is not
permitted.
[-Passphrase sssssssssss] : Enters the new passphrase.The pass
phrase is case-sensitive. It must be between 8 and 32 characters and contain
at least one number, one lowercase letter, one uppercase letter, and one
non-alphanumeric character (e.g., < > @ +). The space character is not
permitted.
Table 42: Drive Security Key
Convention MegaCli -CreateSecurityKey useEKMS –aN
Description Creates security key using EKMS.
Convention MegaCli -ChangeSecurityKey -SecurityKey sssssssssss
[-Passphrase sssssssssss] | [-KeyID kkkkkkkkkkk] –aN
Description To change the security from EKMS to LKM.
Convention MegaCli -ChangeSecurityKey useEKMS -OldSecurityKey
sssssssssss –aN
Description To change security from LKM to EKM.
Convention MegaCli -ChangeSecurityKey -useEKMS –aN-
Description Rekeying in EKMS