v INVALID_RECOVERY_KEY_STATE
v RECOVERY_KEY_ALREADY_VERIFIED
Rekey the Security Admins
Restarts the recovery key generation process as described in
encrypt_recovery_key_generate
Parameters:
This command restarts the recovery key generation process as described in
encrypt_recovery_key_generate. The only difference is that the parameters (users
and min_required) are optional, and will default to the values specified in the last
call to encrypt_recovery_key_generate. Note that none of the new recovery keys
will take effect until the last user has verified his or her's recovery key. Until then,
if recovery is required, the previous keys will be valid.
Example:
Output:
Access Control:
Troubleshooting: Please define a master key server by invoking encrypt_key
server_update and retry.
Recovery key state is inconsistent with the option provided.
Troubleshooting: Check the recovery key state using encrypt_recovery_key_list.
The recovery key has already been verified.
Troubleshooting: Check the recovery key state using encrypt_recovery_key_list
encrypt_recovery_key_rekey [ users=Users ] [ min_req=MinRequired ]
Name
Type
min_req
Integer
users
Object name
xcli -u -c XIV1 encrypt_recovery_key_rekey users=secadmin1,secadmin2,secadmin3,secadmin4
min_req=3
Command completed successfully.
User Category
Storage administrator
Storage integration administrator
Application administrator
Security administrator
Read-only users
Description
Mandatory
Minimum number
N
of required
Security Admins
recovery key
shares
Comma delimited
N
list of Security
Admins to rekey
Permission
Disallowed
Disallowed
Disallowed
Allowed
Disallowed
Chapter 23. Encryption enablement and support commands
Default
0
N/A
501