Users Guide

Key encryption

Use the Key Encryption feature to:

• Apply local encryption for PERC H710, H710P, H730, H730P, H810, and H830 RAID controllers.

• Delete the local encryption key.

• Encrypt the existing unsecure virtual drives.

• To change an existing encryption key to another one.

NOTE: For more information about the key encryption feature, see the

Key Encryption in Lifecycle Controller

white

paper at www.delltechcenter.com/lc.

Applying the local key on a RAID controller

Before applying the local key on a RAID controller, make sure that the controller is security-capable.

To apply the local key on a RAID controller:

1. Start Lifecycle Controller. For more information, see Starting Lifecycle Controller.

2. In the left pane, click Hardware Configuration.

3. In the right pane, click Configuration Wizards.

4. Under Storage Configuration wizards, click Key Encryption.

5. Select the controller to apply a local key and click Next.

6. Click Set up local key encryption and click Next.

NOTE: Some controller options are disabled if they do not support encryption.

7. Enter the Encryption Key Identifier that is associated with the entered passphrase.

The Encryption Key Identifier is a passphrase hint; you must enter the passphrase when Lifecycle Controller prompts this hint.

8. In the New Passphrase field, enter a passphrase.

NOTE:

The controller uses the passphrase to encrypt the disk drive data. A valid passphrase contains 8–32

characters. It must include a combination of uppercase and lowercase letters, numbers, and symbols without spaces.

9. In the Confirm Passphrase field, re-enter the passphrase, and then click Finish.

Local key encryption mode

You can perform the following tasks while the controller is in the Local Key Encryption mode:

NOTE:

For more information on the specification and configuration-related information for the PERC H710, H710P,

H810, and PERC 9 controllers, see the

PERC H710, H710P, and H810 Technical Guidebooks

• Encrypt unsecure virtual disks — Enable data encryption on all the security-capable, unsecure virtual drives.

NOTE: This option is available if there are secure-capable virtual disks connected to a security-capable controller.

• Rekey controller and encrypted disks with a new key — Replace the existing local key with a new key.

• Remove encryption and delete data — Delete the encryption key on the controller and all the secure virtual drives along with its data.

After deletion, controller state changes to No encryption mode.

Related tasks

Encrypting unsecure virtual disks

Rekey controller with new local key

Removing encryption and deleting data

Encrypting unsecure virtual disks

Make sure that the following prerequisites are met:

• Selected controller is security-capable.

• Security-capable virtual drives must be attached to the controller.

Configure