Complete the Startup Wizard
Dell Compellent
131
About Secure Data
Secure
Data
is
a
licensed
feature
that
provides
data
‐
at
‐
rest
encryption
with
key
management.
Using
Secure
Data
to
manage
SEDs
requires
an
external
key
management
server.
If
a
key
management
server
has
not
been
configured
or
is
unavailable,
you
can
manage
FIPS
SEDs
into
a
Secure
Data
folder,
however
the
disks
remain
in
a
pending
state
until
the
key
management
server
is
available.
Each
FIPS
disk
in
Storage
Center
has
an
internal
Media
Encryption
Key
(MEK).
The
key
resides
on
the
disk,
providing
encryption
for
data
written
to
the
disk
and
decryption
for
data
as
it
is
read
from
the
disk.
Destroying
the
key
makes
any
data
on
the
disk
immediately
and
permanently
unreadable,
a
process
referred
to
as
a
crypto
erase.
When
you
add
an
SED
to,
or
release
an
SED
from
a
Secure
Data
folder,
the
MEK
is
destroyed
and
a
new
key
is
generated.
This
allows
the
disk
to
be
reused,
although
all
previous
data
is
lost.
To
protect
data
at
rest,
all
SEDs
in
a
Secure
Data
disk
folder
lock
when
power
is
removed
(Lock
on
Reset
enabled).
When
power
is
removed
from
the
drive,
the
drive
cannot
be
unlocked
without
access
to
the
authority
credential
stored
in
the
key
management
server.
Note:
Because
disks
that
contain
user
data
cannot
be
moved
from
a
Secure
Data
folder,
Storage
Center
does
not
crypto
erase
disks
that
contain
user
data.
