HP Secure Encryption instruction

HP Secure Encryption

Installation and User Guide

Abstract

This document includes feature, installation, and configuration information about HP Secure Encryption and is for the person who installs, administers, and troubleshoots servers and storage systems. HP assumes you are qualified in the servicing of computer equipment and trained in recognizing hazards in products with hazardous energy levels.

Part Number: 759078-002

August 2014

Edition: 2

Image 1

HP manual HP Secure Encryption Installation and User Guide

Contents

HP Secure Encryption Installation and User Guide Page Contents Support and other resources About HP Secure Encryption Overview Benefits Encryption features Feature Description Eskm HP Smart Storage Administrator Solution componentsHP ProLiant servers HP SmartCache HP Smart Array ControllerHP iLO Minimum requirements HP Eskm and key management HP Enterprise Secure Key Manager 3.1 and later Licensing Recommended security settings at remote sites Encryption setup guidelinesEncrypted backups Planning Deployment scenarios Security domainsRemote and local key management requirements Local key management mode ConfigurationConfiguring the controller local mode Configuration Configuring Remote Key Management Mode Remote Key Management Mode Logging in to the HP Eskm Configuring the HP EskmAdding a user Configuration Adding a group Assigning a user to a group Configuration Configuration Creating a Master Key Running a key query Placing a key in a group Configuration Assigning a key to a group Configuring HP iLO Connecting HP iLO to HP Eskm Configuration Configuring the controller remote mode Configuration Operations Accessing Encryption ManagerOpening Encryption Manager Logging into Encryption Manager Set or change the Crypto Officer password Managing passwords Set or change user account password Set or change the password recovery question Set or change the controller password Suspending the controller password Resuming the controller password Changing the Master Encryption Key Working with keysRekeying the Drive Encryption Keys Rescanning keys Creating a plaintext volume Operations Operations Converting plaintext volumes into encrypted volumes Changing key management modes Enabling/disabling plaintext volumes Enabling/disabling the firmware lock Enabling/disabling local key cache Importing drives with different Master Keys Importing drive sets in Local Key Management Mode Operations Controllers Maintenance Flashing firmware DrivesReplacing a physical drive Encryption Manager Locating groups associated with a drive GroupsQuery by drive serial number Maintenance Query by previous server name Maintenance Displaying log information Running queries Maintenance Maintenance Maintenance Common issues TroubleshootingLost or forgotten Crypto Officer password Lost or forgotten controller password Remote mode Local modeLocating the key using the HP Eskm Lost or forgotten Master Key Locating the key using iLO Forgotten which Master key goes with which drive Master key not exporting Logical drives remain offline Testing the connection between HP iLO and the HP Eskm Potential errors encountered Error Description Action Clearing the encryption configuration Before you contact HP Support and other resourcesHP contact information Encryption algorithms Appendix Glossary Local Master Encryption Key ILOMaster Encryption Key Plaintext Remote Key Manager Volume encryption key Documentation feedback Eskm Index Index