8.2 SED Based Encryption Settings

This tab provides the options to perform the SED based encryption operations. Only one operation can be performed at a time, see the following figure.
Figure 8-1. SED Based Encryption Settings Options
Graphical user interface Description automatically generated

Following is the list of operations:

  • Disable SED Based Encryption: This operation disables the Self Encrypting Drive (SED) based encryption configuration.
  • Change Master Key: This operation updates the existing master key with a new master key.
  • Change Master Key Identifier: This operation changes the hint to remember the master key.
  • Set/Change Controller Password: This operation provides the option to set/change the controller password.
  • Unlock With Controller Password: This operation provides the option to unlock the SED locked offline logical device, which might occur when the controller password was not entered or an invalid controller password was entered at boot time. This option is only applicable when a controller password is configured, and SED Encryption status is “Waiting on Controller Password”.
  • Clear Controller Password: This operation removes the configured controller password.
  • Rekey: This operation generates a new set of encryption keys for the controller. This is applicable only when the SED encryption is configured in the Remote Key Management mode and the controller supports the Remote Key Management Rekey feature.
Note:
  • The Change Master Key, Change Master Key Identifier, Set/Change Controller Password, Unlock With Controller Password and Clear Controller Password fields are applicable only for Local mode and are disabled in Remote mode.
  • The Rekey field is applicable only for the Remote Key Management mode and is not displayed in Local mode.