Dell PowerVault ME5 Series Storage System CLI Reference Guide

Sets or changes the lock key for the use of Full Disk Encryption. The lock key is derived from the passphrase and stored within the system.

You must retain the value of the passphrase and the lock key ID that the command returns. If you lose the passphrase, you could be locked out of your data.

When a system and its disks are in the Secured, Locked state, you must enter the passphrase for the system’s lock key ID to restore access to data. Disk groups will be dequarantined, pool health will be restored, and volumes will become accessible.

You cannot set the lock key if any disks are failed or unusable. Use the show disks command to check whether any disks have Usage value FAILED or UNUSABLE. In order to set the lock key, all failed disks must be removed from the system. For disks in the UNUSABLE state due to a key mismatch, use the set fde-import-key to unlock these disks and bring them into the system before issuing the set fde-lock-key command.

If any disks are in leftover state (Usage value LEFTOVR), the command will proceed and identify the disks that remain in that state.

set fde-lock-key

[current-passphrase <value>]

[noprompt]

passphrase <value>

Optional. If the system is secured, the current passphrase can be provided when using the noprompt option. The command will prompt for this current passphrase if it is not supplied.

Optional. Suppresses confirmation prompts. Specifying this parameter allows the command to proceed without user interaction.

A customer-supplied password associated with securing the system. Input rules:

• The value is case sensitive.
• The value can have 8–32 characters.
• The value can include printable UTF-8 characters except: , < > \ (Any double-quote characters in the passphrase are automatically removed.)

# set fde-lock-key passphrase "Customer lock--01/10/2014"

clear fde-keys

set fde-import-key

set fde-state

show fde-state