HP Secure Encryption manual Configuring HP iLO

Page 28

3.Select the key, and then click Properties.

4.A new Key and Policy Configuration screen appears. Click the Permissions tab.

5.Under Group Permissions, complete the following:

a.In the Group field, enter the Group name created previously.

b.Under Export, select Always.

6.Click Save. The screen will refresh and list the group permissions.

Configuring HP iLO

Integrated Lights Out (iLO) manages key exchanges between the HP ESKM and the Smart Array controller. HP iLO initially uses user credentials with administrative privileges created on the HP ESKM to automatically register and create a private, unique, MAC address-based username account for all key exchanges. The administrative account is termed the deployment user account. All HP iLO accounts can be viewed in the HP ESKM under Users And Groups and take the form iLO-MAC Address. The HP iLO-specific account is placed in the group indicated in the group field on the HP iLO Key Manager page. If the group does not exist, HP iLO creates one and places the account in that group along with all future keys generated.

Prerequisites

Configuration 28

Image 28
Contents HP Secure Encryption Installation and User Guide Page Contents Support and other resources Overview About HP Secure EncryptionEncryption features BenefitsFeature Description Eskm HP Smart Storage Administrator Solution componentsHP ProLiant servers HP Smart Array Controller HP SmartCacheHP iLO Minimum requirementsHP Enterprise Secure Key Manager 3.1 and later HP Eskm and key managementLicensing Encryption setup guidelines Recommended security settings at remote sitesEncrypted backups PlanningDeployment scenarios Security domainsRemote and local key management requirements Local key management mode ConfigurationConfiguring the controller local mode Configuration Remote Key Management Mode Configuring Remote Key Management ModeLogging in to the HP Eskm Configuring the HP EskmAdding a user Configuration Adding a group Assigning a user to a group Configuration Configuration Creating a Master Key Placing a key in a group Running a key queryConfiguration Assigning a key to a group Configuring HP iLO Connecting HP iLO to HP Eskm Configuration Configuring the controller remote mode Configuration Accessing Encryption Manager OperationsOpening Encryption Manager Logging into Encryption ManagerManaging passwords Set or change the Crypto Officer passwordSet or change the password recovery question Set or change user account passwordSet or change the controller password Suspending the controller password Resuming the controller password Changing the Master Encryption Key Working with keysRekeying the Drive Encryption Keys Creating a plaintext volume Rescanning keysOperations Operations Converting plaintext volumes into encrypted volumes Changing key management modes Enabling/disabling plaintext volumes Enabling/disabling the firmware lock Enabling/disabling local key cache Importing drive sets in Local Key Management Mode Importing drives with different Master KeysOperations Maintenance ControllersDrives Flashing firmwareReplacing a physical drive Encryption ManagerLocating groups associated with a drive GroupsQuery by drive serial number Maintenance Query by previous server name Maintenance Displaying log information Running queries Maintenance Maintenance Maintenance Troubleshooting Common issuesLost or forgotten Crypto Officer password Lost or forgotten controller passwordLocal mode Remote modeLocating the key using the HP Eskm Lost or forgotten Master KeyLocating the key using iLO Forgotten which Master key goes with which drive Logical drives remain offline Master key not exportingTesting the connection between HP iLO and the HP Eskm Potential errors encountered Error Description Action Clearing the encryption configuration Before you contact HP Support and other resourcesHP contact information Appendix Encryption algorithmsGlossary ILO Local Master Encryption KeyMaster Encryption Key PlaintextVolume encryption key Remote Key ManagerDocumentation feedback Index EskmIndex