Skip to main content
SANtricity commands

Enable external security key management

Contributors netapp-driley
PDFs

The enable storageArray externalKeyManagement file command enables external security key management for a storage array that has Full Disk Encryption drives, and creates the initial drive security key.

Supported Arrays

This command applies to an individual E4000, E2800, E5700, EF600 or EF300 storage array. It does not operate on E2700 or E5600 storage arrays.

Roles

To execute this command on an E4000, E2800, E5700, EF600, or EF300 storage array, you must have the Security Admin role.

Context

Note

This command applies only to external key management.

Syntax

enable storageArray externalKeyManagement
file="fileName"
passPhrase="passPhraseString"
saveFile=(TRUE | FALSE)

Parameters

Parameter Description

file

The file path and the file name where the new security key will be stored. Enclose the file path and the file name in double quotation marks (" "). For example:

file="C:\Program Files\CLI\sup\drivesecurity.slk"
Note

The file name must have an extension of .slk.

passPhrase

A character string that encrypts the security key so that you can store the security key in an external file. Enclose the pass phrase character string in double quotation marks (" ").

saveFile

Verifies and saves the security key to a file. Set to FALSE to not save and verify the security key to a file. The default value is TRUE.

Notes

Your pass phrase must meet these criteria:

  • Must be between eight and 32 characters long.

  • Must contain at least one uppercase letter.

  • Must contain at least one lowercase letter.

  • Must contain at least one number.

  • Must contain at least one non-alphanumeric character, for example, < > @ +.

Note

If your pass phrase does not meet these criteria, you will receive an error message.

Minimum firmware level

8.40

8.70 adds the saveFile parameter.