Data encryption status information is shown in
Table 8 (page 116)
.
Table 8 Data Encryption Status
Description
Status Information
Yes
if a backup has been saved.
Backup Saved
No
if a backup has not been saved and one is required.
The system is licensed with data encryption, but data
encryption is not necessarily enabled.
Licensed
Data encryption is enabled.
Enabled
The number of drives that are not SEDs. If this number is
non-zero, encryption operations cannot complete until these
Non-SEDs
drives are removed from the system, as an encrypted system
requires all drives to be self-encrypting.
Number of disks that are not usable. If this number is
non-zero, encryption operations cannot be completed until
these drives are removed from the system.
FailedDisks
Replacing a Failed Disk Drive
The drive-replacement feature and the
servicemag
command function as they do in a system
without data encryption. With data encryption, the old or failed drive will be locked when it is
removed from the system. When the system detects a new drive, the drive will be cryptographically
erased before it is admitted into the system.
For more information about the
servicemag
command, see the HP 3PAR Command Line Interface
Reference.
Upgrading an SED with New Firmware
Upgrades to the HP 3PAR OS function as they do for non-SEDs, except that SED drives have
different firmware. Typically, the upgrade is performed automatically for users.
To upgrade a SED, issue the
upgradepd [-f] [-skiptest] {-a | -w <WWN>... |
<PD_ID>...}
command, where:
•
-f
: Upgrades the PD firmware without requiring confirmation.
•
-skiptest
: Skips the 10 second diagnostic test normally completed after each PD upgrade.
•
-a:
: Specifies that all PDs with valid IDs, and whose firmware is not current, are upgraded.
If this option is not specified, then either the
-w <WWN>
option or the
PD_ID
specifier must
be issued on the command line.
•
-w <WWN>...
: Specifies that the firmware of either one or more PDs, identified by their
WWNs, is upgraded. If this option is not specified, then either the
-a
option or the
PD_ID
specifier must be issued on the command line.
•
<PD_ID>...
: specifies that the firmware of either one or more PDs identified by their IDs
(PD_ID) is upgraded. If this specifier is not used, then the
-a
option or the
-w <WWN>
option
must be issued on the command line.
If the disk is locked, it will be unlocked. The digitally signed firmware will be downloaded.
116
Data Encryption