Users Guide
• Remove encryption and delete data — Delete the encryption key on the controller and all the secure virtual drives along with its data.
After deletion, controller state changes to No encryption mode.
Encrypting unsecure virtual disks
Make sure that the following prerequisites are met:
• Selected controller is security-capable.
• Security-capable virtual drives must be attached to the controller.
• Controller must be in the local-key-encryption mode.
To encrypt the unsecure virtual drives:
NOTE: All virtual drives created on the same physical disk-drives are automatically encrypted when any one of the
virtual drives is encrypted.
1. Start Lifecycle Controller. For more information, see Starting Lifecycle Controller
2. In the left pane, click Hardware Configuration.
3. In the right pane, click Configuration Wizards.
4. On the Storage Configuration wizards page, click Key Encryption.
5. Select the controller that is encrypted and click Next.
NOTE:
The encryption mode (Local Key Encryption) applied to the selected controller does not change.
6. Select Encrypt unsecure virtual disks and click Next.
7. To enable encryption, select unsecure virtual drives and click Finish.
Rekey controller with new local key
To rekey the controller with a new local key:
1. Start Lifecycle Controller. For more information, see Starting Lifecycle Controller
2. In the left pane, click Hardware Configuration.
3. In the right pane, click Configuration Wizards.
4. On the Storage Configuration wizards page, click Key Encryption.
5. On the Select Controller Select the controller to which the local key is applied and click Next.
6. In the Existing Passphrase field, enter the existing passphrase associated with the displayed Encryption Key Identifier.
7. In the New Encryption Key Identifier field, enter the new identifier. The Encryption Key Identifier is a passphrase hint; you must
enter the passphrase when Lifecycle Controller prompts this hint.
8. In the New Passphrase field, enter the passphrase that is associated with the new encryption key identifier.
Removing encryption and deleting data
To remove the encryption and delete the data on the virtual disks:
CAUTION:
The existing encryption, virtual drives, and all the data are permanently deleted.
1. Start Lifecycle Controller. For more information, see Starting Lifecycle Controller
2. In the left pane, click Hardware Configuration.
3. In the right pane, click Configuration Wizards and click Key Encryption.
4. Select the controller on which you must remove the key that was applied and click Next.
5. In the right pane, select Remove encryption and delete data and click Next.
6. Select Delete encryption key and all secure virtual disks and click Finish.
Breaking mirrored drives
To split the mirrored array of RAID-1 virtual drives:
1. Start Lifecycle Controller.
Configure
45