Nvidia DGX Station A100 User Manual

Managing Self-Encrypting Drives on DGX Station A100
DGX Station A100 DU-10189-001 _v5.0.2|32
The following example output shows drives than cannot be used for encryption. SED capable =
Y and Boot disk = Y, or SED capable = N.
Disk(s) that cannot be used for encryption
+------+------+------+-------------------------------------------------------------
| Name | Serial | Status |
+------+------+------+-------------------------------------------------------------
| /dev/nvme0n1 | xxxxx1 | SED capable = Y, Boot disk = Y, Locked = N, Lock Enabled
= N, MBR done = N |
| /dev/sr0 | xxxxx2 | SED capable = N, Boot disk = N, Locked = N, Lock Enabled
= N, MBR done = N |
| /dev/nvme1n1 | xxxxx3 | SED capable = Y, Boot disk = Y, Locked = N, Lock Enabled
= N, MBR done = N |
| /dev/sda | unknown | SED capable = N, Boot disk = N, Locked = N, Lock Enabled
= N, MBR done = N |
You also can specify the output be presented in JSON format by using the -j option.
$ sudo nv-disk-encrypt info -j
The drives that can be used for encryption are indicated by the following:
"sed_capable": true,
"used_for_boot": false
The drives that t be used for encryption are indicated by both of the following options:
"sed_capable": true,
"used_for_boot": true
"sed_capable": false,
5.5.1.2. Creating the Drive/Password Mapping JSON File
You can create the drive/password mapping JSON file and use this file to initialize the system.
1. Create a JSON file that lists all the eligible SED-capable drives that you want to manage.
These are the list of drives that you obtained completing the task in Determining Which
Drives Can be Managed as Self-Encrypting.
The following example shows the format of the JSON file:
{
"/dev/nvme2n1":
"<your-password>",
"/dev/nvme3n1":
"<your-password>",
"/dev/nvme4n1":
"<your-password>",
"/dev/nvme5n1":
"<your-password>",
}
Remember:
‣
You must follow the syntax exactly.
‣
Passwords must consist of only upper-case letters, lower-case letters, digits, and/or
these special characters: ~, :, @, %, ^, +, =, _, and ,.

Nvidia DGX Station A100 Specifications

General

Brand	Nvidia
Model	DGX Station A100
Category	Desktop
Language	English

Summary

Introduction to the NVIDIA DGX Station A100

Registering Your DGX Station A100

Instructions for registering your DGX Station A100 for support.

DGX Station A100 Hardware Summary

Getting Started with DGX Station A100

Connecting and Powering on the DGX Station A100

Step-by-step guide to connect and power on the DGX Station A100.

Using DGX Station A100 as a Server Without a Monitor

Configuration for operating the DGX Station A100 without a display.

Running Workloads on Systems with Mixed Types of GPUs

Methods for running workloads utilizing mixed GPU types effectively.

Running with Docker Containers

Guide to running workloads within Docker containers on DGX.

Running on Bare Metal

Instructions for running applications directly on the system hardware.

Using Multi-Instance GPUs

How to utilize Multi-Instance GPU (MIG) on NVIDIA A100 GPUs.

Completing the Initial Ubuntu OS Configuration

Steps to finalize the initial setup of the Ubuntu OS.

Using the BMC

Understanding the BMC Controls

Overview of the primary controls available in the BMC dashboard.

Configuring a Static IP Address for the BMC

Steps to assign a static IP address to the BMC.

Configuring a BMC Static IP Address Using ipmitool

Using ipmitool to set a static IP address for the BMC via command line.

Configuring a BMC Static IP Address Using the System BIOS

Setting a static IP for the BMC through the system BIOS.

Logging into the BMC

Procedure for accessing the BMC via a web browser.

Changing Your Default BMC Password

Instructions to change the default BMC password for security.

Logging in After Entering an Incorrect Password

Information on recovering access after multiple failed login attempts.

Common BMC Tasks

Configuring the BMC Login Credentials

Using the Remote Control

Setting Up Active Directory or LDAP/E-Directory

Uploading or Generating SSL Certificates

Generating the SSL Certificate

Uploading the SSL Certificate

Enable MIG Mode in DGX Station A100

Managing Self-Encrypting Drives on DGX Station A100

Overview

Installing the nv-disk-encrypt Package

Steps to install the nv-disk-encrypt software package.

Initializing the System for Drive Encryption

Procedure to initialize DGX system drives for encryption.

Enabling Drive Locking

How to enable automatic drive locking after initialization.

Initialization Examples

Example 1: Passing in the JSON File

Determining the Drives Can be Managed as Self Encrypting

Creating the Drive/Password Mapping JSON File

Example 2: Generating Random Passwords

Example 3: Specifying Passwords One at a Time When Prompted

Disabling Drive Locking

Erasing Your Data

Procedure for securely erasing data and reconfiguring RAID.

Configuring Trusted Computing

Enabling the TPM

Steps to enable the Trusted Platform Module (TPM) in BIOS.

Clearing the TPM

Changing Disk Passwords, Adding Disks, or Replacing Disks

Recovering a Lost Key

Unpacking and Repacking the DGX Station A100

Unpacking the DGX Station A100

Repacking the DGX Station A100 for Shipment

Security

Changing Your BMC Credentials

Procedure to change BMC username and password for security.

Plugging in the Network Cable

Safety

General Precautions

General safety guidelines for operating the DGX Station A100.

Electrical Precautions

Safety measures related to power cables and electrical connections.