beautypg.com

Importing drive sets in local key management mode, Importing drives with different master keys – HP Secure Encryption User Manual

Page 47

background image

Operations 47

b.

Retry Interval in Minutes

6.

Click OK.

Importing drive sets in Local Key Management Mode

When the Master Encryption Key on an imported drive set is different from the Master Encryption Key on the
receiving HP Smart Array Px3x controller, the importing volumes remain offline until user intervention is

taken. HP SSA can be used to supply the Master Key name for the importing drives.
In Remote Key Management Mode, drives automatically import when the associated key is present on the HP

ESKM 3.1. If keys are unable to be retrieved but are confirmed to be on the HP ESKM 3.1, it is possible they
are assigned to a different group.

Importing drives with different Master Keys

Migrating drives to a non-encrypted controller results in the logical volumes associated with those drives
remaining offline until encryption is enabled with the proper Master Encryption Key settings and mode for

that volume.
If non-encrypted drives are migrated to an encrypting controller, the controller automatically brings the

logical volumes associated with those physical drives online and makes them available for use.
To import drives with a different Master Key into a controller when using Local Key Management Mode:

1.

Power down the server. For more information, see the documentation that ships with the server.

2.

Attach drives. For more information, see the documentation that ships with the drives.

3.

Power up the server. For more information, see the documentation that ships with the server.

4.

Start HP SSA. For more information, see the HP Smart Storage Administrator User Guide.

5.

Under Array Controller(s), click the controller assigned to the new drives. Red alert message indicators

will appear next to it.

6.

Under Actions, click Configure.

7.

From the side menu, click Encryption Manager.

8.

Log in to Encryption Manager ("

Logging into Encryption Manager

" on page

32

).

9.

Under Utilities, click Import Foreign Local Key.