Terminology

> Terminology

> The following table describes the terminology related to the SafeStore encryption feature.

> Table 3. Terminology used in FDE

> Option | Description
> Authenticated Mode | The RAID configuration is keyed to a user password. The password must be provided on system boot to authenticate the user and facilitate unlocking the configuration for user access to the encrypted data.
> Key backup | You need to provide the controller with a lock key if the controller is replaced or if you choose to migrate secure virtual disks. To do this task, you must back up the security key.
> Password | An optional authenticated mode is supported in which you must provide a password on each boot to make sure the system boots only if the user is authenticated. Firmware uses the user password to encrypt the security key.
> Re-provisioning | Re-provisioning disables the security system of a device. For a controller, it involves destroying the security key. For SafeStore encrypted drives, when the drive lock key is deleted, the drive is unlocked and any user data on the drive is securely deleted. This situation does not apply to controller-encrypted drives, because deleting the virtual disk destroys the encryption keys and causes a secure erase.
> Security Key | A key based on a user-provided string. The controller uses the security key to lock and unlock access to the secure user data. If the security key is unavailable, user data is irretrievably lost. You must take all precautions to never lose the security key.
> Un-Authenticated Mode | This mode allows controller to boot and unlock access to user configuration without user intervention.

DB15-000988-08-December 2013
Copyright© 2013 by LSI Corporation. All rights reserved.