Users Guide

NOTE: This option is available if there are secure-capable virtual disks connected to a security-
capable controller.
• Rekey controller and encrypted disks with a new key — Replace the existing local key with a new key.
• Remove encryption and delete data — Delete the encryption key on the controller and all the secure
virtual drives along with its data. After deletion, controller state changes to No encryption mode.
Related Links
Encrypting unsecure virtual disks
Rekey controller with new local key
Removing encryption and deleting data
Encrypting unsecure virtual disks
Make sure that the following prerequisites are met:
• Selected controller is security-capable.
• Security-capable virtual drives must be attached to the controller.
• Controller must be in the local-key-encryption mode.
To encrypt the unsecure virtual drives:
NOTE: All virtual drives created on the same physical disk-drives are automatically encrypted when
any one of the virtual drives is encrypted.
1. Start Lifecycle Controller. For more information, see Starting Lifecycle Controller.
2. In the left pane, click Hardware Configuration.
3. In the right pane, click Configuration Wizards.
4. On the Storage Configuration wizards page, click Key Encryption.
5. Select the controller that is encrypted and click Next.
NOTE: The encryption mode (Local Key Encryption) applied to the selected controller does not
change.
6. Select Encrypt unsecure virtual disks and click Next.
7. To enable encryption, select unsecure virtual drives and click Finish.
Related Links
Local key encryption mode
Rekey controller with new local key
To rekey the controller with a new local key:
1. Start Lifecycle Controller. For more information, see Starting Lifecycle Controller.
2. In the left pane, click Hardware Configuration.
3. In the right pane, click Configuration Wizards.
4. On the Storage Configuration wizards page, click Key Encryption.
5. On the Select Controller Select the controller to which the local key is applied and click Next.
6. In the Existing Passphrase field, enter the existing passphrase associated with the displayed
Encryption Key Identifier.
7. In the New Encryption Key Identifier field, enter the new identifier. The Encryption Key Identifier is a
passphrase hint; you must enter the passphrase when Lifecycle Controller prompts this hint.
56