Changing Drive Security Settings

Note: Drive security settings cannot be changed when EKM is enabled. Changes to drive security settings for EKM will fail from LSA.

Perform the following steps to change the encryption settings for the security key identifier, security key, and password.

In the Controller dashboard, select More Actions > Change Drive Security.
The Change Drive Security dialog appears.
Figure 1. Change Drive Security Dialog
Select the Change current security settings radio button from the Current drive security mode is FW field.

When LKMS is enabled, LSA will show the current drive security mode as FW instead of LKM.
The following options appear, which list the actions you can perform including editing the security key identifier, the security key, and the password.
Figure 2. Change Drive Security Dialog Options
Either you can use the existing security key identifier assigned by the controller, or you can specify a new security key identifier.
If you change the security key, you need to change the security key identifier. Otherwise, you cannot differentiate between the security keys.
Either select the Use the existing drive security key option or select the Enter a new drive security key to specify a new security key and confirm once again.
Either click Suggest Security Key to have the system create a security key, or you can enter a new security key in the Security Key text field.
(Optional) – Select the Show Key check box.

Note: The security key is case-sensitive. It must be between 8 and 32 characters and contain at least one number, one lowercase letter, one uppercase letter, and one non-alphanumeric character (for example, < > @ +).
(Optional) – Select the Pause for password at boot time check box.
If you choose this option, you are prompted to provide the password each time you restart your server.
(Optional) – Select the Enforce strong password security check box.

If you choose this option, make sure the password is between 8 and 32 characters and contain at least one number, one lowercase letter, one uppercase letter, and one non-alphanumeric character (for example, < > @ +). The space character is not permitted. The password is case-sensitive.
If you chose to use a password, either enter the existing password or enter a new password, and confirm once again.
(Optional) – Select the Show Password check box.

If you choose this option, the password that you specify will be visible to you. If you do not select this option, the password will not be visible to you.
Select the Confirm check box and click Change Security to change the security settings.
The Authenticate Drive Security Settings dialog appears. Your authentication is required for the changes to take effect. Enter the new security key that you just specified in the Security Key field.
Enter the new security key that you just specified and click Authenticate to authenticate the changes.

The existing configuration on the controller is updated to use the new security settings.