HP Secure Encryption HP ProLiant servers, Solution components, HP Smart Storage Administrator

Page 9

Feature	Description	Notes

Volume level encryption	Provides flexibility in allowing the user to	—
	selectively encrypt at the volume or logical
	drive level regardless of RAID level.

HP ProLiant servers

The following HP ProLiant server components are compatible with HP Secure Encryption:

Component	Gen8 Model		Gen9 Model

Blades	•	BL420c	BL460c
	•	BL460c
	•	BL465c
	•	BL660c

ML	•	ML350e V2	ML350
	•	ML350p

Rack	•	DL320e Gen8 v2	•	DL360
	•	DL360e/p	•	DL380
	•	DL380e/p	•	DL160
	•	DL385p	•	DL180
	•	DL560
	•	DL580
	•	Apollo 6000
SL	•	SL270s	SL4540*
	•	SL210t
	•	SL4540*

Other	WS460c		—
*External storage

For more information about HP ProLiant servers, see the HP website (http://www.hp.com/go/proliantgen8/docs).

Solution components

HP Smart Storage Administrator

HP SSA is a configuration and management tool for HP Smart Array controllers. Starting with HP ProLiant Gen8 servers, HP SSA replaces ACU with an enhanced GUI and additional configuration features.

HP SSA exists in three interface formats: the HP SSA GUI, the HP SSA CLI, and HP SSA Scripting. Although all formats provide support for configuration tasks, some of the advanced tasks are available in only one format.

Some HP SSA features include the following:

•Supports online array capacity expansion, logical drive extension, assignment of online spares, and RAID or stripe size migration

•Suggests the optimal configuration for an unconfigured system

•Provides diagnostic and SmartSSD Wear Gauge functionality on the Diagnostics tab

•For supported controllers, provides access to additional features.

Overview 9

Image 9

Contents HP Secure Encryption Installation and User Guide Page Contents Support and other resources About HP Secure Encryption Overview Benefits Encryption featuresFeature Description Eskm Solution components HP Smart Storage AdministratorHP ProLiant servers HP SmartCache HP Smart Array ControllerHP iLO Minimum requirementsHP Eskm and key management HP Enterprise Secure Key Manager 3.1 and laterLicensing Recommended security settings at remote sites Encryption setup guidelinesEncrypted backups PlanningSecurity domains Deployment scenariosRemote and local key management requirements Configuration Local key management modeConfiguring the controller local mode Configuration Configuring Remote Key Management Mode Remote Key Management ModeConfiguring the HP Eskm Logging in to the HP EskmAdding a user Configuration Adding a group Assigning a user to a group Configuration Configuration Creating a Master Key Running a key query Placing a key in a groupConfiguration Assigning a key to a group Configuring HP iLO Connecting HP iLO to HP Eskm Configuration Configuring the controller remote mode Configuration Operations Accessing Encryption ManagerOpening Encryption Manager Logging into Encryption ManagerSet or change the Crypto Officer password Managing passwordsSet or change user account password Set or change the password recovery questionSet or change the controller password Suspending the controller password Resuming the controller password Working with keys Changing the Master Encryption KeyRekeying the Drive Encryption Keys Rescanning keys Creating a plaintext volumeOperations Operations Converting plaintext volumes into encrypted volumes Changing key management modes Enabling/disabling plaintext volumes Enabling/disabling the firmware lock Enabling/disabling local key cache Importing drives with different Master Keys Importing drive sets in Local Key Management ModeOperations Controllers MaintenanceFlashing firmware DrivesReplacing a physical drive Encryption ManagerGroups Locating groups associated with a driveQuery by drive serial number Maintenance Query by previous server name Maintenance Displaying log information Running queries Maintenance Maintenance Maintenance Common issues TroubleshootingLost or forgotten Crypto Officer password Lost or forgotten controller passwordRemote mode Local modeLocating the key using the HP Eskm Lost or forgotten Master KeyLocating the key using iLO Forgotten which Master key goes with which drive Master key not exporting Logical drives remain offlineTesting the connection between HP iLO and the HP Eskm Potential errors encountered Error Description Action Clearing the encryption configuration Support and other resources Before you contact HPHP contact information Encryption algorithms AppendixGlossary Local Master Encryption Key ILOMaster Encryption Key PlaintextRemote Key Manager Volume encryption keyDocumentation feedback Eskm IndexIndex