Document Outline

• HP Secure Encryption Installation and User Guide
• Abstract
• Notice
• Contents
• Overview
  • About HP Secure Encryption
    • Benefits
    • Encryption features
    • Solution components
      • HP ProLiant Gen8 servers
      • HP Smart Storage Administrator
        • Minimum requirements
      • HP Smart Array Controller
      • HP SmartCache
      • HP iLO
      • HP Enterprise Secure Key Manager 3.1
        • HP ESKM 3.1 and key management
      • Licensing
• Planning
  • Encryption setup guidelines
  • Recommended security settings at remote sites
  • Encrypted backups
  • Security domains
  • Deployment scenarios
    • Remote and local key management requirements
• Configuration
  • Local key management mode
    • Configuring the controller (local mode)
  • Remote Key Management Mode
    • Configuring Remote Key Management Mode
      • Configuring the HP ESKM 3.1
        • Logging in to the HP ESKM 3.1
        • Adding a user
        • Adding a group
        • Assigning a user to a group
        • Creating a Master Key
        • Placing a key in a group
          • Running a key query
          • Assigning a key to a group
      • Configuring HP iLO
        • Connecting HP iLO to HP ESKM 3.1
      • Configuring the controller (remote mode)
• Operations
  • Accessing Encryption Manager
    • Opening Encryption Manager
    • Logging into Encryption Manager
  • Managing passwords
    • Set or change the Crypto Officer password
    • Set or change the password recovery question
    • Set or change user account password
    • Set or change the controller password
    • Suspending the controller password
    • Resuming the controller password
  • Working with keys
    • Changing the Master Encryption Key
    • Rekeying the Drive Encryption Keys
    • Rescanning keys
  • Creating a plaintext volume
  • Converting plaintext volumes into encrypted volumes
  • Changing key management modes
  • Enabling/disabling plaintext volumes
  • Enabling/disabling the firmware lock
  • Enabling/disabling local key cache
  • Importing drive sets in Local Key Management Mode
    • Importing drives with different Master Keys
• Maintenance
  • Controllers
    • Clearing the controller
    • Replacing an encrypted controller
    • Replacing a server while retaining the controller
    • Preconfiguring replacement components
    • Flashing firmware
  • Drives
    • Replacing a physical drive
    • Validating the number of encrypted drives for license compliance
      • Encryption Manager
      • HP ESKM 3.1
  • Groups
    • Locating groups associated with a drive
      • Query by drive serial number
      • Query by previous server name
  • Displaying log information
  • Running queries
• Troubleshooting
  • Common issues
    • Lost or forgotten Crypto Officer password
    • Lost or forgotten controller password
    • Lost or forgotten Master Key
      • Local mode
      • Remote mode
        • Locating the key using the HP ESKM 3.1
        • Locating the key using iLO
    • Forgotten which Master key goes with which drive
    • Logical drives remain offline
    • Master key not exporting
  • Testing the connection between HP iLO and the HP ESKM 3.1
  • Potential errors encountered
  • Clearing the encryption configuration
• Support and other resources
  • Before you contact HP
  • HP contact information
• Appendix
  • Encryption algorithms
• Glossary
  • ACU
  • Controller key
  • Controller-secured region
  • Critical Security Parameters (CSPs)
  • Crypto officer
  • Drive array
  • Drive encryption key
  • Drive key caching
  • Encrypted data
  • ESKM
  • FIPS
  • HIPAA
  • HITECH
  • HP SSA
  • iLO 4
  • Local Master Encryption Key
  • Master Encryption Key
  • NIST
  • NVRAM
  • PCI-DSS
  • Plaintext
  • Remote Key Manager
  • Volume encryption key
• Documentation feedback
• Index