Lenovo ThinkServer TS430 User Manual

Page 355
MegaRAID SAS Software User Guide Chapter 11: Using MegaRAID® Advanced Software
| SafeStore Encryption Services
 Enabling Drive Security using EKM
 Enabling Drive Security using LKM
11.5.1 Enabling Drive Security using
EKM
EKM is used for key management when large number of systems are deployed. You can
automate and manage the life cycle of keys and unlock configurations using EKM.
Yet another important feature of EKM is that you can use it without human intervention
to perform operations like drive migration and controller replacement.
MegaRAID accomplishes the task of obtaining keys by interacting with the EKM agent.
The EKM agent talks to the EKM server (EKMS) through a network and gets the security
key for the controller.
Keys are retrieved or created to perform the following tasks:
 Create secure VDs.
 Insert drives to replace failed drives in a secure configuration.
 Re-key the system based on EKMS policies or user request.
 Gain access to a secured configuration during boot.
 Unlock and import secured drives during migration.
Perform the following configurations to enable the drive security to create secure VD
using the EKM mode with the support of EKM servers.
 EKM mode is supported by MSM, and EKMS is present.
 EKM mode is supported by MSM, and EKMS is not present.
 Change the current security settings, or switch between the modes.
 Change the security settings when the user is in EKM, and wants to switch to LKM.
 Import Foreign Drives.
11.5.2 Supporting EKM mode When you choose EKM for drive security, and decide to configure, EKM mode is
supported, and EKMS is present, the application responds to different behaviors
depending on the scenarios at that particular time.
The first scenario occurs when EKM is enabled, and the second scenario occurs when
EKM is enabled and EKMS is present. The details of this scenario are described further in
this section.
Perform the following steps to configure, EKM mode is supported, and EKMS is present.
1. Select the Physical View tab in the left panel of the MegaRAID Storage Manager
window, and click a controller icon.
2. Choose any one of the following options to arrive at the Drive Security Choose
Mode wizard.
 Select Go To >Controller>Enable Drive Security in the main navigation bar in the
top portion of the MSM screen.
 Right-click the controller icon, and click Enable Drive Security menu. The Drive
Security Choose Mode wizard appears as shown in the following figure.

Lenovo ThinkServer TS430 Specifications

General

Brand	Lenovo
Model	ThinkServer TS430
Category	Server
Language	English