User Guide
DDOC0108-000-A2
CNS4 CSfC
6 - 16
Operation
Revision 1.0
To generate the keyfile, the passphrase is enter as a text file and then saved to the CNS4 keyfile
directory. After the keyfile is saved to the CNS4, a SWE container must be created using the --init
flag before it can be opened, closed or erased. The --flag is applied to partitions. The example
shown below is creating a SWE container on partition 2.
Example
After the SWE container has been created, the following command and flags are used;
•
swcrypt --open
will open a SWE container.
•
swcrypt --close
will close a SWE container.
•
swcrypt --erase
will erase a SWE container.
These commands / flags typically have an option included with them. The option is used to select
partitions to command / flag is applied to. The options are:
•
# - single NAS disk volume number
•
# # - <# #> two or more NAS disk volumes
•
all - all NAS disk volumes
The example below opens a SWE container on partition 2 by manually entering the passphrase.
Example
The example below opens a SWE container on partition 2 using a keyfile.
Example
The status of the SWE container can be checked by using the swcrypt command without any
associated flags. The example show below shows no SWE containers on partitions 1 and 2. The
container on partition 3 is open while the container on partition 4 is closed.
Example
Additional information regarding command associated with the software encryption layer is
available in paragraph 11.2.25
and the
cns>
swcrypt --init 2 --key-file /keyfiles/keyfile2.txt
[swcrypt]
cmd=init Part=2 status=OK
[!swcrypt] OK
cns>
swcrypt --open 2 --pass
[swcrypt]
cmd=open Part=2 Enter passphrase for /dev/sdb1:
Verify passphrase:
status=OK
[!swcrypt] OK
cns>
swcrypt --open 2 --key-file /keyfiles/keyfile2.txt
[swcrypt]
cmd=open Part=3 status=OK
[!swcrypt] OK
cns>
swcrypt
[swcrypt]
Partitions: 4
Part0: name=fsm0-d01 swe=no
Part1: name=fsm1-d01 swe=no
Part2: name=fsm2-d01 swe=open
Part3: name=fsm3-d01 swe=closed
[!swcrypt] OK
