Alternatively, enable/disable platform level security with the following commands in OneCLI:
• Enable security:
1. Enable security.
onecli.exe config set IntelOptaneDCPMM.SecurityOperation "Enable Security"
--imm USERID:PASSW0RD@10.104.195.86
2. Set the security passphrase.
onecli.exe config set IntelOptaneDCPMM.SecurityPassphrase "123456"
--imm USERID:PASSW0RD@10.104.195.86
Where
123456
stands for the passphrase.
3. Reboot the system.
• Disable security:
1. Disable security.
onecli.exe config set IntelOptaneDCPMM.SecurityOperation "Disable Security"
--imm USERID:PASSW0RD@10.104.195.86
2. Enter passphrase.
onecli.exe config set IntelOptaneDCPMM.SecurityPassphrase "123456"
--imm USERID:PASSW0RD@10.104.195.86
3. Reboot the system.
–
Single DCPMM:
Choose this option to run security operation on one or more selected DCPMM
units.
Notes:
• Single DCPMM passphrases are not stored in the system, and security of the locked units needs
to be disabled before the units are available for access or secure erase.
• Always make sure to keep records of the slot number of locked DCPMMs and corresponding
passphrases. In the case the passphrases are lost or forgotten, the stored data cannot be backed
up or restored, but you can contact Lenovo service for administrative secure erase.
• After three failed unlocking attempts, the corresponding DCPMMs enter “exceeded” state with a
system warning message, and the DCPMM unit can only be unlocked after the system is
rebooted.
To enable passphrase, go to
Security
➙
Press to Enable Security
.
– Secure Erase
Notes:
– Password is required to perform Secure Erase when security enabled.
– Before executing secure erase, make sure ARS (Address Range Scrub) is done on all PMEMs or on
the specific PMEMs selected. Otherwise, secure erase cannot be started on all PMEMs or the
specific PMEM selected, and the following text message will pop out:
The passphrase is incorrect for single or multiple or all
Intel Optane PMEMs selected, or maybe there is namespace
on the selected PMEMs. Secure erase operation is not done
on all Intel Optane PMEMs selected.
Secure erase cleanses all the data that is stored in the PMEM unit, including encrypted data. This data
deletion method is recommended before returning or disposing a malfunctioning unit, or changing
PMEM mode. To perform secure erase, go to
Security
➙
Press to Secure Erase
.
.
265
Summary of Contents for ThinkSystem SR950
Page 1: ...ThinkSystem SR950 Setup Guide Machine Types 7X12 7X11 and 7X13 ...
Page 55: ...Figure 22 Server components Chapter 2 Server components 51 ...
Page 276: ...272 ThinkSystem SR950 Setup Guide ...
Page 282: ...278 ThinkSystem SR950 Setup Guide ...
Page 286: ...282 ThinkSystem SR950 Setup Guide ...
Page 389: ......
Page 390: ......