IBM System Storage DS3000, Programming Manual

Page: 178 / 652

Parameters
Parameter Description
file
The file path and the file name that has the security key.
Enclose the file path and the file name that has the security
key in double quotation marks (" "). For example:
file=
"C:\Program Files\CLI\sup\seckey.slk"
Important: The file name must have an extension of .slk .
passPhrase
A character string that encrypts the security key so that you
can store the security key in an external file. Enclose the
pass phrase character string in double quotation marks (" ").
Notes
Your pass phrase must meet these criteria:
v
The pass phrase must be between eight and 32 characters long.
v
The pass phrase must contain at least one uppercase letter.
v The pass phrase must contain at least one lowercase letter.
v
The pass phrase must contain at least one number.
v The pass phrase must contain at least one non-alphanumeric character, for example, < > @ +.
Note:
If your pass phrase does not meet these criteria, you will receive an error message.
Enable array security
This command converts a non-secure array to a secure array.
Syntax
enable volumeGroup [volumeGroupName] security
Parameter
Parameter Description
volumeGroup
The alphanumeric identifier (including - and _) of the
array that you want to place in the Security Enabled
state. Enclose the array identifier in square brackets ([ ]).
Notes
The following conditions must be met to successfully run this command:
v
All drives in the storage subsystem must be full disk encryption drives.
v
The Full Disk Encryption premium feature must be enabled.
v
The storage subsystem security key has to be set.
v
The storage subsystem is Optimal, and it does not have FlashCopy volumes or repository volumes.
The controller firmware creates a lock that restricts access to the FDE drives. FDE drives have a state
called Security Capable. When you create a security key, the state is set to Security Enabled, which
restricts access to all FDE drives that exist within the storage subsystem.
3-132
IBM System Storage DS3000, DS4000, and DS5000: Command Line Interface and Script Commands Programming Guide