Users Guide

Troubleshooting Security Key Errors

Secured Foreign Import Errors

A foreign configuration is a RAID configuration that already exists on a replacement physical disk that you

install in a system. A secured foreign configuration is a RAID configuration that was created under a

different security key.

There are two scenarios in which a secured foreign import fails:

• The passphrase authentication fails—A VD secured with a security key different from the current

controller security key cannot be imported without authentication of the original passphrase used to

secure them. Supply the correct passphrase to import the secured foreign configuration. If you have

lost or forgotten the passphrase, the secured foreign disks remain locked (inaccessible) until the

appropriate passphrase is entered or if they are instant secure erased.

• The secured VD is in an offline state after supplying the correct passphrase—You must check to

determine why the virtual disk failed and correct the problem. See the topic Troubleshooting.

Failure to Select Or Configure Non Self-Encrypting Disks (Non-SED)

A virtual disk can be either secured or unsecured depending on how it was configured when created. In

order to create a secured virtual disk, the controller must have a security key present and must contain

SEDs only. In order to select/configure non-SED, you must create an unsecured virtual disk. You can

create an unsecured virtual disk even if there is a security key. Select the Secure VD option as No in the

Create New VD menu. See the topic Performing A Manual Rebuild Of An Individual Physical Disk for steps

on how to create an unsecured virtual disk.

Failure to delete security key

A security key is used to lock or unlock access to a security-enabled component. This key is not utilized

in the actual encryption of data. If a security key is present, both secured and unsecured virtual disks may

exist.

To delete the security key, you must have a previously established security key present on the controller

and there cannot be any configured secured disks. If there are configured secured disks, remove or

delete them.

Failure To Instant Secure Erase Task On Physical Disks

Instant Secure Erase is the process of securely erasing all data permanently on an encryption-capable

physical disk and resetting the security attributes. It is used in a couple of scenarios such as deleting a

foreign configuration in the event of a forgotten or lost passphrase or unlocking a disk that had been

previously locked.

Instant Secure Erase can be executed only on encryption-capable disks as long as the disks are not hot

spares and are not configured (part of a virtual disk). Ensure that the conditions are met and see the topic

Instant Secure Erase.