IBM System Storage DS3000, Programming Manual

Page: 289 / 652

Set Storage Subsystem Security Key
Use this command to set the security key that is used throughout the storage subsystem to implement the
Full Disk Encryption (FDE) premium feature. When any security-capable drive in the storage subsystem
is assigned to a secured subsystem, that drive is security-enabled using the security key. Before you can
set the security key, you must use the create
storageSubsystem securityKey
command to create the
security key.
Syntax
set storageSubsystem securityKey
Parameters
None.
Notes
Security-capable disk drives have hardware to accelerate cryptographic processing and each has a unique
disk drive key. A security-capable disk drive behaves like any other disk drive until it is added to a
secured subsystem. When a security-capable disk drive is added to a secured subsystem, it becomes
security-enabled.
Whenever a security-enabled disk drive is powered on, it requires the correct security key from the
controller before it can read or write data. So, a security-enabled drive uses two keys: the disk drive key
that encrypts and decrypts the data and the security key that authorizes the encryption and decryption
processes. The
set storageSubsystem securityKey
command commits the security key to all of the
controllers and security-enabled disk drives in the storage subsystem. The Full Disk Encryption (FDE)
feature ensures that if a security-enabled disk drive is physically removed from a storage subsystem, its
data cannot be read by any other device unless the security key is known.
Set Storage Subsystem Time
This command sets the clocks on both controllers in a storage subsystem by synchronizing the controller
clocks with the clock of the host from which you run this command.
Syntax
set storageSubsystem time
Parameters
None.
Set Enhanced Remote Mirroring
This command defines the properties for a remote-mirrored pair.
Note: In previous versions of this command the feature identifier was
remoteMirror
. This feature
identifier is no longer valid and is replaced by
syncMirror
.
Syntax
set syncMirror (localVolume [volumeName] |
localVolumes [volumeName1 ... volumeNameN])
role=(primary | secondary)
[force=(TRUE | FALSE)]
Chapter 3. Script Commands
3-243