Users Guide

Security key and RAID management
Topics:
• Security key implementation
•
Local Key Management
• Create a security key
• Change Security Settings
• Disable security key
• Create a secured virtual disk
• Secure a non-RAID disk
• Secure a pre-existing virtual disk
• Import a secured non-RAID disk
• Import a secured virtual disk
• Dell Technologies OpenManage Secure Enterprise Key Manager
Security key implementation
The PERC 11 series of cards support self-encrypting disk (SED) for protection of data against loss or theft of SEDs. Protection
is achieved by the use of encryption technology on the drives. There is one security key per controller. You can manage
the security key using local key management (LKM) or OpenManage Secure Enterprise Key Manager, also referred as Secure
Enterprise Key Manager (SEKM). The LKM key can be escrowed in to a file using Dell OpenManage Storage Management
application. The security key is used by the controller to lock and unlock access to encryption-capable physical disks. In order to
take advantage of this feature, you must:
1. Have SEDs in your system.
2. Create a security key.
Local Key Management
You can use Local Key Management (LKM) to generate the key ID and the passphrase required to secure the virtual disk. You
can secure virtual disks, change security keys, and manage secured foreign configurations using this security mode.
NOTE: Under LKM, you are prompted for a passphrase when you create the key.
Create a security key
About this task
NOTE: There is no passphrase backup option when you create a security key; you need to remember your passphrase.
Steps
1. Enter the Dell PERC 11 Configuration Utility. See Navigate to Dell PERC 11 configuration utility.
2. Click Main Menu > Controller Management > Advanced Controller Management > Enable Security.
3. Select the Security Key Management mode as Local Key Management.
4. Click Ok.
5. In the Security Key Identifier field, enter an identifier for your security key.
8
64 Security key and RAID management