Users Guide

Local key encryption mode
You can perform the following tasks while the controller is in the Local Key Encryption mode:
NOTE: For more information on the specification and configuration-related information for the PERC H710, H710P, H810,
and PERC 9 controllers, see the PERC H710, H710P, and H810 Technical Guidebooks.
● Encrypt unsecure virtual disks — Enable data encryption on all the security-capable, unsecure virtual drives.
NOTE: This option is available if there are secure-capable virtual disks connected to a security-capable controller.
● Rekey controller and encrypted disks with a new key — Replace the existing local key with a new key.
● Remove encryption and delete data — Delete the encryption key on the controller and all the secure virtual drives along with
its data. After deletion, controller state changes to No encryption mode.
Related tasks
Encrypting unsecure virtual disks on page 50
Rekey controller with new local key on page 50
Removing encryption and deleting data on page 51
Encrypting unsecure virtual disks
Make sure that the following prerequisites are met:
● Selected controller is security-capable.
● Security-capable virtual drives must be attached to the controller.
● Controller must be in the local-key-encryption mode.
To encrypt the unsecure virtual drives:
NOTE:
All virtual drives created on the same physical disk-drives are automatically encrypted when any one of the virtual
drives is encrypted.
1. Start Lifecycle Controller. For more information, see Starting Lifecycle Controller.
2. In the left pane, click Hardware Configuration.
3. In the right pane, click Configuration Wizards.
4. On the Storage Configuration wizards page, click Key Encryption.
5. Select the controller that is encrypted and click Next.
NOTE: The encryption mode (Local Key Encryption) applied to the selected controller does not change.
6. Select Encrypt unsecure virtual disks and click Next.
7. To enable encryption, select unsecure virtual drives and click Finish.
Related concepts
Local key encryption mode on page 50
Rekey controller with new local key
To rekey the controller with a new local key:
1. Start Lifecycle Controller. For more information, see Starting Lifecycle Controller.
2. In the left pane, click Hardware Configuration.
3. In the right pane, click Configuration Wizards.
4. On the Storage Configuration wizards page, click Key Encryption.
5. On the Select Controller Select the controller to which the local key is applied and click Next.
6. In the Existing Passphrase field, enter the existing passphrase associated with the displayed Encryption Key Identifier.
7. In the New Encryption Key Identifier field, enter the new identifier. The Encryption Key Identifier is a passphrase hint;
you must enter the passphrase when Lifecycle Controller prompts this hint.
50
Configure