Table of Contents
Advertisement
Chapter 23. Encryption enablement and support commands
The following sections describe the XIV Command Line Interface (XCLI) for
encryption configuration.
The sections are listed as follows:
v
v
v
v
v
v
v
v
v
v
v
v
v
v
v
Disable Encryption
Disable the data protection feature
This command disables the data protection feature. A prerequisite for this is that
no volumes are defined on the system. In addition to disabling the data protection,
a cryptographic erase is performed on all protected bands (ensuring that all
existing user data is no longer accessible). After the command successfully
completes, all bands are left in an unlocked state. Disabling encryption when the
encryption state other than ACTIVE (displayed as "Enabled" in state_list) is an
error.
Example:
encrypt_disable(Disable the data protection feature)
encrypt_enable(Enable the data protection feature)
encrypt_keyserver_define(Defines a keyserver to be used by the system)
encrypt_keyserver_delete(Removes a keyserver used by the system)
encrypt_keyserver_list(Lists the keyservers currently defined in the system
along with connectivity status)
encrypt_keyserver_rekey(Initiates a rekey against the master keyserver)
encrypt_keyserver_rename(Change the name of a defined keyserver)
encrypt_keyserver_update(Change a keyserver ip address and/or port)
encrypt_recovery_key_enter(Used to unlock encrypted disks when the system
reboots and cannot access any of the defined keyservers, and recovery keys were
defined)
encrypt_recovery_key_generate(Used to specify which Security Admins will
receive recovery key shares, and the minimum number of recovery key shares
that need to be entered)
encrypt_recovery_key_get(Used to retrieve the recovery key share generated for
the current user)
encrypt_recovery_key_rekey(Restarts the recovery key generation process as
described in encrypt_recovery_key_generate)
encrypt_recovery_key_status(Shows status information regarding recovery keys)
encrypt_recovery_key_verify(Used to confirm that the current user has correctly
copied the recovery key share presented by encrypt_recovery_key_get)
encrypt_recovery_key_list(Lists recovery key share information)
encrypt_disable
xcli -u -c XIV1 encrypt_disable -y
485
Hide quick links:
Advertisement
Chapters
Table of Contents
