CLI Guide

set fde-lock-key

set fde-state

show fde-state

set fde-state

Description Changes the overall state of the system for the use of Full Disk Encryption. The system can be secured,

where each disk becomes secured and not accessible outside the system. Alternatively, the system can be

repurposed, where each disk is secure erased.

Minimum role manage

Syntax

set fde-state

[noprompt]

[repurpose]

[secure passphrase value]

Either the repurpose parameter or the secure parameter must be specified.

Parameters

[noprompt]

Optional. Suppresses confirmation prompts. Specifying this parameter allows the command to proceed

without user interaction.

[repurpose]

Optional. The system will be repurposed, which secure erases all disks. Before issuing the command, all data

(such as volumes and disk groups) must be deleted from the disks

[secure passphrase value]

Optional. The system and all its disks will become secured, using the specified FDE system passphrase, which

must have been previously configured. A value that includes a space must be enclosed in double quotes. If

the disks are not all FDE-capable the command will fail, and no changes will be made.

Examples Secure the system using Full Disk Encryption.

# set fde-state secure passphrase "Customer lock--01/10/2014"

A lost passphrase will result in unrecoverable data loss. Please re-enter

the passphrase to confirm: "Customer lock--01/10/2014"