Users Guide
Once drives are unlocked, you can import the foreign conguration using the CMC web interface or RACADM.
If the controller is power cycled after the unlock and before the import phase, the drives are locked again.
If the system has multiple foreign congurations, unlock and import each foreign conguration before unlocking the foreign conguration.
The key ID used in unlocking is used only to identify the drives with matching the key ID. After the matching drives are found, the
passphrase is used for unlocking the drives.
Unlocking Foreign Conguration Using CMC Web Interface
To unlock the foreign conguration:
1 In the left pane, click Chassis Overview > Storage > Controllers > Setup.
2 Navigate to the Setup page.
3 Click Click here to Unlock.
The Physical Disks page is displayed.
4 Select the physical disks that you want to unlock.
5 Check if the Physical disk is associated with the key identier.
6 From the Actions drop-down, select Unlock Drive.
A dialogue box is displayed prompting you to enter the security key phrase.
7 Enter a passphrase in the Security Key Passphrase text box.
8 Re-enter the passphrase and click Unlock.
The physical drive is unlocked and the drive does not appear in the Recover Physical Disks list.
Unlocking Foreign Conguration Using RACADM
To unlock foreign conguration by running a RACADM command, use the following syntax:
racadm raid unlock:<Controller FQDD> -key <Key id> -passwd <passphrase>
For more information, see the Chassis Management Controller PowerEdge VRTX RACADM Command Line Reference Guide.
Cryptographic Erase
You can use the cryptographic erase option to securely erase data present on secure SEDs. Secure data exists on drives even after the
virtual disk is deleted and is thus exposed to threat. Cryptographic erase can be used in the following conditions:
• To erase data to retire/reuse secure drives.
• To securely erase data if secure and locked foreign conguration need not be imported.
• To recover locked drives if the passphrase is lost.
You can perform the cryptographic erase on one or more SED physical disks.
CAUTION
: Performing the cryptographic erase task erases all data on the physical disk.
204 Managing Chassis Storage