cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

How to do key rotation for SEDs (self encrypting drives) on UCS E-Series blades

420
Views
0
Helpful
0
Comments

This is a step-by-step guide with instructions for changing the encryption key on UCS E-Series blades which have SED drives installed using the MegaRaid bios. 

Hardware and Software used in this guide

  • UCS E-Series blade from generation M3
  • CIMC Version 3.2.6
  • BIOS Version 2.6
  • HDD with encryption capabilities (E100D-SED-12T)

Prerequisites

In this guide we assume that drive security is already enabled and that the virtual KVM console is accessible.

Step-by-step instructions

Login to the CIMC Web GUI and launch the virtual KVM console.

Screenshot 2019-03-15 at 12.02.07 (2).png

 

From the KVM console, power-on or reload the server. Wait for the MegaRAID BIOS to finish initialising and to show "Press <CTRL><R> to run MegaRAID Configuration Utility". Press CTRL-R to launch the MegaRAID configuration utility.

Screenshot 2019-03-14 at 17.23.42.png

 

In the MegaRAID configuration utility, select the MegaRAID controller and press F2. From the menus select "Drive Security" and then "Change security settings".Screenshot 2019-03-14 at 17.31.51.png

 

Input the new security key twice. Select "OK" to proceed. 

Note: The security key is case-sensitive. It must be between eight and thirty-two characters and contain at least one number, one lowercase letter, one uppercase letter, and one non-alphanumeric character (e.g. < > @ +). The space character is not permitted.

Screenshot 2019-03-14 at 17.37.07.png

 

Provide the current security key and select "OK".

Screenshot 2019-03-14 at 17.42.48.png

Acknowledge the warning by selecting "YES".

Screenshot 2019-03-14 at 17.42.57.png

That's it. You have successfully changed the security key.

CreatePlease to create content
Content for Community-Ad