7.2.2
Logical and Physical Drives
Adapters support using SEDs for logical and physical drives with the disk-based encryption feature enabled.
Encryption-enabled drives are referred to as secured drives. The controller delivers the credentials to the SEDs
and unlocks them. SEDs can also be used for logical and physical drives without the disk-based encryption feature
turned on (like a non-SED device) and is referred to as non-secured drives.
Secured SED drives can also be used as boot drives or MaxCache logical drives. Adaptec Controllers also support
coexistence of both secured and non-secured drives.
If a secure drive is used as a boot device and the controller password is enabled, the controller password must be
entered from the HII utility every time the OS is booted.
Note:
Mixing of different SED drive types (Opal and Enterprise) in a logical drive or maxCache array is not
supported.
7.2.3
Key Management
The controller is responsible for delivering the credentials (PIN) to the SEDs.
When the controller is managing SEDs, a Master Key is created during the initial setup. The Master Key is required
to secure the SEDs and unlock the user data on managed SEDs. The Master Key is stored locally in the controller
NVRAM. Optionally, a Master Key Identifier can also be entered at the time of Master Key creation.
7.2.4
Controller Password
The controller password is intended to provide an extra level of security for local SED management and guards
against theft of the server, adapter, and the SEDs. The adapter will not unlock any SED until the controller password
is provided.
7.2.5
Changing the Master Key
Updating the Master Key is a controller wide operation that applies to all secured SED drives.
7.2.6
Reverting to OFS
Controller management tools can revert a secured SED to the OFS. Secured logical drives must be deleted before
returning to OFS, which also destroys all the data on the logical drive.
If the credential of the secured SED is unavailable, reverting to the OFS requires the 32-byte PSID from the drive’s
label to perform the revert operation.
7.2.7
Importing a Foreign Secured SED Volume
A foreign SED is defined as a secured physical or logical drive that was previously attached to an Adaptec controller
with a different credential than what is stored in the new Adaptec controller. The controller can detect that the drive
was moved from a different controller and can import the drive to the new controller when the original credentials are
entered.
7.2.8
Controller Factory Reset
Factory Reset deletes all secrets, keys, passwords, and identifiers on the controller and places the controller’s
encryption configuration in a factory new state. It does not modify the drives.
7.3
Workflows
7.3.1
Securing a SED
Use the following steps to secure the SED:
1.
Connect the supported SED to the controller.
2.
Enable SED management from HII, ARCCONF, or maxView. The tools will generate a Master Key with an
option to override with a custom Master Key. Optionally, the Master Key Identifier and the controller password
can be provided.
Managing SED
©
2022 Microchip Technology Inc.
and its subsidiaries
User Guide
DS00004281C-page 41
