7914FDE.fm
Draft Document for Review March 28, 2011 12:24 pm
466
IBM System Storage DS3500: Introduction and Implementation Guide
The array is now secured, as indicated by the padlock in a locked position, as shown in
Figure 15-17.
Figure 15-17 Array is now secured with Disk Security enabled
15.4 Additional secure disk functions
In the following sections, we discuss the following functions:
Changing the security key
Saving the security key file
Secure disk erase
FDE drive status
Hot spare drives
15.4.1 Changing the security key
The security key can be changed if the details of the existing key be corrupted or the pass
phrase forgotten, provided that there are no outstanding Secure Disk communications
between the FDE drives and Disk Encryption Manager (for example, if a disk is in a “locked”
state). Because the disk encryption key never leaves the disk, you might want to periodically
change the encryption key, the way a user might periodically change the administrative
password to an operating system. This depends on the organization’s security guidelines.
The process to change the security key is very similar to that of creating it initially. To change
the key, select, in the top left hand corner of the Storage Manager menu, Storage
Subsystem
Drive Security
Change Security Key. The confirmation window to change
the security opens as in Figure 15-18 on page 467
Summary of Contents for DS3500
Page 2: ......
Page 5: ...iii Draft Document for Review March 28 2011 12 24 pm 7914edno fm ...
Page 789: ......
