Contents | HP Secure Encryption specs

Contents
Overview	5
About HP Secure Encryption	5
Benefits	6
Encryption features	6
HP ProLiant servers	9
Solution components	9
Planning	13
Encryption setup guidelines	13
Recommended security settings at remote sites	13
Encrypted backups	13
Security domains	14
Deployment scenarios	14
Remote and local key management requirements	14
Configuration	15
Local key management mode	15
Configuring the controller (local mode)	15
Remote Key Management Mode	17
Configuring Remote Key Management Mode	17
Configuring the controller (remote mode)	31
Operations	33
Accessing Encryption Manager	33
Opening Encryption Manager	33
Logging into Encryption Manager	33
Managing passwords	34
Set or change the Crypto Officer password	34
Set or change the password recovery question	35
Set or change user account password	35
Set or change the controller password	36
Suspending the controller password	37
Resuming the controller password	38
Working with keys	39
Changing the Master Encryption Key	39
Rekeying the Drive Encryption Keys	39
Rescanning keys	40
Creating a plaintext volume	40
Converting plaintext volumes into encrypted volumes	43
Changing key management modes	44
Enabling/disabling plaintext volumes	45
Enabling/disabling the firmware lock	46
Enabling/disabling local key cache	47
Importing drive sets in Local Key Management Mode	48
Importing drives with different Master Keys	48
Maintenance	50
Controllers	50
Contents	3

Image 3

HP Secure Encryption manual Contents

Contents

HP Secure Encryption Installation and User Guide Page Contents Support and other resources About HP Secure Encryption Overview Benefits Encryption features Feature Description Eskm Solution components HP Smart Storage AdministratorHP ProLiant servers Minimum requirements HP Smart Array ControllerHP SmartCache HP iLO HP Eskm and key management HP Enterprise Secure Key Manager 3.1 and later Licensing Planning Encryption setup guidelinesRecommended security settings at remote sites Encrypted backups Security domains Deployment scenariosRemote and local key management requirements Configuration Local key management modeConfiguring the controller local mode Configuration Configuring Remote Key Management Mode Remote Key Management Mode Configuring the HP Eskm Logging in to the HP EskmAdding a user Configuration Adding a group Assigning a user to a group Configuration Configuration Creating a Master Key Running a key query Placing a key in a group Configuration Assigning a key to a group Configuring HP iLO Connecting HP iLO to HP Eskm Configuration Configuring the controller remote mode Configuration Logging into Encryption Manager Accessing Encryption ManagerOperations Opening Encryption Manager Set or change the Crypto Officer password Managing passwords Set or change user account password Set or change the password recovery question Set or change the controller password Suspending the controller password Resuming the controller password Working with keys Changing the Master Encryption KeyRekeying the Drive Encryption Keys Rescanning keys Creating a plaintext volume Operations Operations Converting plaintext volumes into encrypted volumes Changing key management modes Enabling/disabling plaintext volumes Enabling/disabling the firmware lock Enabling/disabling local key cache Importing drives with different Master Keys Importing drive sets in Local Key Management Mode Operations Controllers Maintenance Encryption Manager DrivesFlashing firmware Replacing a physical drive Groups Locating groups associated with a driveQuery by drive serial number Maintenance Query by previous server name Maintenance Displaying log information Running queries Maintenance Maintenance Maintenance Lost or forgotten controller password TroubleshootingCommon issues Lost or forgotten Crypto Officer password Lost or forgotten Master Key Local modeRemote mode Locating the key using the HP Eskm Locating the key using iLO Forgotten which Master key goes with which drive Master key not exporting Logical drives remain offline Testing the connection between HP iLO and the HP Eskm Potential errors encountered Error Description Action Clearing the encryption configuration Support and other resources Before you contact HPHP contact information Encryption algorithms Appendix Glossary Plaintext ILOLocal Master Encryption Key Master Encryption Key Remote Key Manager Volume encryption key Documentation feedback Eskm Index Index