Skip to main content
Command reference

security key-manager onboard enable

Suggest changes

Enable the Onboard Key Manager

Availability: This command is available to cluster administrators at the admin privilege level.

Description

This command enables the Onboard Key Manager for the admin Vserver.

Parameters

Examples

The following example enables the Onboard Key Manager for the admin Vserver cluster-1:

cluster-1::> security key-manager onboard enable

Enter the cluster-wide passphrase for the Onboard Key Manager:

Re-enter the cluster-wide passphrase:

After configuring the Onboard Key Manager, save the encrypted configuration data in a safe location so that you can use it if you need to perform a manual recovery operation. To view the data, use the "security key-manager onboard show-backup" command.

The following example enables the Onboard Key Manager for the admin Vserver cluster-1 with the cluster-wide passphrase "myPassphrase" on an external USB mass storage device:

cluster-1::> security key-manager onboard enable -vserver cluster-1 -okm-on-usb-enabled true -onboard-passphrase myPassphrase

Enter the cluster-wide passphrase for the Onboard Key Manager:

Re-enter the cluster-wide passphrase:
After configuring the Onboard Key Manager, save the encrypted configuration data in a safe location so that you can use it if you need to perform a manual recovery operation. To view the data, use the "security key-manager onboard show-backup" command.