HP Comprehensive Guide to Troubleshooting E Secure Encryption Errors
Page 68

Error

Description

Action

 

 

 

Remote key manager

Slot X Encryption Failure –

To troubleshoot, see the Key Manager page in

communication failure

Communication issue prevents

HP iLO interface.

 

drive keys from being

 

 

retrieved. Encrypted logical

 

 

drives are offline. System may

 

 

not boot.

 

Incorrect or missing Master

Slot X Encryption Failure –

Correct the problem on the HP ESKM.

Key on Remote key manager

Master Encryption Key is

 

 

incorrect or not retrieved from

 

 

HP ESKM. Encrypted logical

 

 

drives may be offline. System

 

 

may not boot.

 

Volume Key decryption failure

Invalid Drive Encryption Keys

Restore the correct version of the Drive

 

on HP ESKM. Encrypted logical

Encryption Key on the HP ESKM.

 

drives may be offline. System

 

 

may not boot.

 

Unable to establish

Communication issue prevents

Reset the controller by rebooting the server.

communication with controller

keys from being retrieved.

 

 

Dependent encrypted logical

 

 

drives are offline. System may

 

 

not boot.

 

Missing local Master Key

Imported encrypted logical

Use HP Smart Storage Administrator to enter the

 

drives are offline; the matching

local Master Encryption Key.

 

local Master Encryption Key is

 

 

required. System may not boot.

 

Controller password failure

All encrypted local drives are

Reboot the server and enter the proper

 

offline due to failure to enter

controller password, or unlock the controller

 

proper controller password.

using HP Smart Storage Administrator.

 

 

 

Controller encryption not

Encrypted logical drives are

Use HP Smart Storage Administrator to enable

enabled

present but encryption is not yet

encryption.

 

enabled. Encrypted logical

 

 

drives are offline.

 

Encryption parameters not set

Encryption is enabled for the

Use Encryption Manager to set the Master Key

 

controller but the Master

name for the controller and reboot.

 

Encryption Key name is not set.

 

Controller/logical drive

Key management mode

Use Encryption Manager to match key

encryption type mismatch

mismatch between controller

management modes. For more information, see

 

and drives. Dependent

"Importing drives with different Master Keys (on

 

encrypted drives offline.

page 48)".

 

 

 

Encryption failure -

Unsupported system ROM

Update the system ROM to a version supporting

unsupported system ROM

detected. Encrypted logical

encryption.

detected

drives may be offline. System

 

 

may not boot.

 

Encrypted logical drives on

Encrypted logical drives are

Move drives to a controller with encryption

non-encrypting controller

offline. Encryption feature is

support or delete the logical drives.

 

not available on this controller.

 

Encryption failure -

Unsupported HP iLO firmware

Update HP iLO firmware to a version supporting

unsupported iLO firmware

detected. Encrypted drive may

encryption.

detected

be offline. System may not

 

 

boot.

 

Troubleshooting 68

Page 67 Page 69
Image 68
Page 67 Page 69
Contents HP Secure Encryption Installation and User Guide Page Contents Support and other resources Overview About HP Secure EncryptionEncryption features BenefitsFeature Description Eskm HP ProLiant servers Solution componentsHP Smart Storage Administrator HP Smart Array Controller HP SmartCacheHP iLO Minimum requirementsHP Enterprise Secure Key Manager 3.1 and later HP Eskm and key managementLicensing Encryption setup guidelines Recommended security settings at remote sitesEncrypted backups PlanningRemote and local key management requirements Security domainsDeployment scenarios Configuring the controller local mode ConfigurationLocal key management mode Configuration Remote Key Management Mode Configuring Remote Key Management ModeAdding a user Configuring the HP EskmLogging in to the HP Eskm Configuration Adding a group Assigning a user to a group Configuration Configuration Creating a Master Key Placing a key in a group Running a key queryConfiguration Assigning a key to a group Configuring HP iLO Connecting HP iLO to HP Eskm Configuration Configuring the controller remote mode Configuration Accessing Encryption Manager OperationsOpening Encryption Manager Logging into Encryption ManagerManaging passwords Set or change the Crypto Officer passwordSet or change the password recovery question Set or change user account passwordSet or change the controller password Suspending the controller password Resuming the controller password Rekeying the Drive Encryption Keys Working with keysChanging the Master Encryption Key Creating a plaintext volume Rescanning keysOperations Operations Converting plaintext volumes into encrypted volumes Changing key management modes Enabling/disabling plaintext volumes Enabling/disabling the firmware lock Enabling/disabling local key cache Importing drive sets in Local Key Management Mode Importing drives with different Master KeysOperations Maintenance ControllersDrives Flashing firmwareReplacing a physical drive Encryption ManagerQuery by drive serial number GroupsLocating groups associated with a drive Maintenance Query by previous server name Maintenance Displaying log information Running queries Maintenance Maintenance Maintenance Troubleshooting Common issuesLost or forgotten Crypto Officer password Lost or forgotten controller passwordLocal mode Remote modeLocating the key using the HP Eskm Lost or forgotten Master KeyLocating the key using iLO Forgotten which Master key goes with which drive Logical drives remain offline Master key not exportingTesting the connection between HP iLO and the HP Eskm Potential errors encountered Error Description Action Clearing the encryption configuration HP contact information Support and other resourcesBefore you contact HP Appendix Encryption algorithmsGlossary ILO Local Master Encryption KeyMaster Encryption Key PlaintextVolume encryption key Remote Key ManagerDocumentation feedback Index EskmIndex
Top Page Image Contents