Lenovo ThinkSystem SR860 V2 - Page 169

App Direct capacity of PMEMs requires the following steps before it is truly available for applications.
1. Namespaces must be created for region capacity allocation.
2. Filesystem must be created and formatted for the namespaces in the operating system.
Each App Direct region can be allocated into one namespace. Create namespaces in the following
operating systems:
– Windows: Use powershell command. To create a namespace, use Windows Server 2019 or later
versions.
– Linux: Use ndctl command.
– VMware: Reboot the system, and VMware will create namespaces automatically.
After creating namespaces for App Direct capacity allocation, make sure to create and format filesystem
in the operating system so that the App Direct capacity is accessible for applications.
• Security
– Enable Security
Attention: By default, PMEM security is disabled. Before enabling security, make sure all the country
or local legal requirements regarding data encryption and trade compliance are met. Violation could
cause legal issues.
PMEMs can be secured with passphrases. Two types of passphrase protection scope are available for
PMEM:
– Platform: Choose this option to run security operation on all the installed PMEM units at once. A
platform passphrase is stored and automatically applied to unlock PMEMs before operating system
starts running, but the passphrase still has to be disabled manually for secure erase.
Alternatively, enable/disable platform level security with the following commands in OneCLI:
• Enable security:
1. Enable security.
onecli.exe config set IntelOptanePMEM.SecurityOperation "Enable Security"
--imm USERID:PASSW0RD@10.104.195.86
2. Set the security passphrase.
onecli.exe config set IntelOptanePMEM.SecurityPassphrase "123456"
--imm USERID:PASSW0RD@10.104.195.86
Where 123456 stands for the passphrase.
3. Reboot the system.
• Disable security:
1. Disable security.
onecli.exe config set IntelOptanePMEM.SecurityOperation "Disable Security"
--imm USERID:PASSW0RD@10.104.195.86
2. Enter passphrase.
onecli.exe config set IntelOptanePMEM.SecurityPassphrase "123456"
--imm USERID:PASSW0RD@10.104.195.86
3. Reboot the system.
– Single PMEM: Choose this option to run security operation on one or more selected PMEM units.
Notes:
Chapter 5. Server hardware setup 161