Managing Self-Encrypting Drives on DGX Station A100
DGX Station A100
DU-10189-001 _v5.0.2 | 31
This avoids the need to create a JSON file or the need to enter a password one by one
during the initialization.
5.4.
Enabling Drive Locking
Here is some information about how to enable drive locking.
After initializing the system for SED management, use the nv-disk-encrypt command to enable
drive locking by issuing the following command:
$
sudo nv-disk-encrypt lock
After initializing the system and enabling drive locking, when the drives lose power, the drives
will be locked. After power is restored to the system, and the system is rebooted, the system
will automatically unlock each drive.
5.5.
Initialization Examples
This section provides information about some initialization examples.
5.5.1. Example 1: Passing in the JSON File
This section provides information about a method that specifies the drive/password mapping
ahead of time.
By using the method in this example, you can simultaneously initialize several drives at a time,
and after issuing the initialization command, and avoid entering a password for each drive.
5.5.1.1. Determining the Drives Can be Managed as Self
Encrypting
Review the storage layout of the DGX system to determine which drives are eligible to be
managed as SEDs.
$
sudo nv-disk-encrypt info
The default output shows which drives
can
be used for encryption and which drives
cannot
be
used.
The following example output snippet shows drives than
can
be used for encryption. Notice
SED capable =
Y
and Boot disk =
N
.
Disk(s) that can be used for encryption
+------+------+------+-------------------------------------------------------------
| Name | Serial | Status |
+------+------+------+-------------------------------------------------------------
| /dev/nvme3n1 | xxxxx1 | SED capable = Y, Boot disk = N, Locked = N, Lock Enabled =
N, MBR done = N |
| /dev/nvme6n1 | xxxxx2 | SED capable = Y, Boot disk = N, Locked = N, Lock Enabled =
N, MBR done = N |
| /dev/nvme9n1 | xxxxx3 | SED capable = Y, Boot disk = N, Locked = N, Lock Enabled =
N, MBR done = N |