Manage Encryption

This command allows the administrator to enable or disable SSL/TLS for the web interface to the system.

Command Attributes

Review the following attribute descriptions.

‑‑set tls	Allows the administrator to enable or disable TLS/SSL.
‑‑enabled	Enable TLS/SSL.
‑‑disabled	Disable TLS/SSL.
‑‑sure	If specified, the command will execute immediately without asking for confirmation.

Check whether the system is capable of HD security.

Query the system's HD security status.

Enable the system's HD security, as well as optionally email the HD security keys file to one or more recipients.

Note: Before enabling HD security, make sure the DXi system supports this type of security. See Encryption CLI Commands.

Caution: After you enable Data-at-Rest Encryption, you cannot disable it or turn it off. Make sure to back up your passphrase and security files, as they may be required for future capacity expansion or rare hardware failure scenarios.

Command Attributes

Review the following attribute descriptions.

‑‑enable hdsecurity	Enables the system's HD security.
‑‑passphrase <passphrase>	Enter the passphrase needed to enable HD security. Passphrase minimum requirements Minimum of 8 characters Not more than 33 characters At least 1 upper case character At least 1 lower case character At least 1 numerical character At least 1 non-alphanumerical character, excluding space, tab, single quote, double quote, or dollar sign.
‑‑emailaddr <recipient_email_address	Enter the email address of the recipient receiving the HD security keys file. To email to more than one recipients, precede each recipient's email address by the ‑‑emailaddr option. Example ‑‑emailaddr a@xxx.com ‑‑emailaddr b@yyy.com
‑‑zippassword <zippassword>	Enter the password needed to zip or unzip the HD security keys file.
‑‑sure	If specified, the CLI executes the command without prompting for confirmation.

DEPRECATED

List the following:

• System's serial number
• Each storage array's name
• Whether the premium feature key is installed for each array
• Each array's serial number
• Each array's feature activation code

Install the Premium Feature Key (PFK) file to the HD security controller.

Note: Note: The PFK feature is for the DXi6900 only.

Command Attibutes

Review the following attribute descriptions.

‑‑install hdsecuritypfk	Installs the PFK file to the HD security controller.
‑‑pfkfile <pfk_file>	Enter the name of the PFK file.
‑‑name Qarray1|Qarray2|Qarray3|Qarray4	Enter the name of the storage array.

Install the turbo PFK file to the DXi system.

Note: Note: The PFK feature is for the DXi6900 only.

Command Attibutes

Review the following attribute descriptions.

‑‑install turbopfk	Installs the PFK file to the DXi system.
‑‑turbopfkfile <turbopfk_file>	Enter the name of the turbo PFK file.
‑‑name Qarray1|Qarray2|Qarray3|Qarray4	Enter the name of the storage array.

Send the HD security keys file to one or more recipients.

Command Attibutes

Review the following attribute descriptions.

‑‑send hdsecuritykey	Sends the HD security key files to the specified recipient(s).
‑‑zippassword <password>	Enter the password needed to zip or unzip the HD security keys file.
‑‑emailaddr <recipient_email_address>	Enter the email address of the recipient receiving the HD security keys file. To email to more than one recipients, precede each recipient's email address by the ‑‑emailaddr option. Example ‑‑emailaddr a@xxx.com ‑‑emailaddr b@yyy.com

Downloads the HD security keys file to the current directory.

Command Attibutes

Review the following attribute descriptions.

‑‑download hdsecuritykeysfile	Downloads the HD security keys file to the current directory.
‑‑zippassword <password>	Enter the password needed to zip or unzip the HD security keys file.

List the following:

• System's serial number
• Each storage array's name
• Whether turbo and encryption premium feature key is installed for each storage array.
• Each storage array's serial number

Each storage array's feature activation code (ID).