Server Administrator Storage Management 8.2 User’s Guide

You can change an encryption key of a controller if the controller already has a configured encryption key. You can delete an encryption key for encrypted controllers only if there are no encrypted virtual disks.

To change the encryption key, type the New Encryption Key Identifier and Passphrase. You are prompted to authenticate the current Passphrase. Ensure that you read the note on the importance of passphrase and consequences of not saving the same, before applying the changes.

When you change the encryption key, the existing configuration on the controller is updated to use the new encryption key. If you have removed any of the encrypted drives previously, you must authenticate with the old passphrase to import the encrypted drives.

When changing the encryption key, you can also save or update the new encryption key credentials to a file in the system where Distributed Web Service is running. Select the Escrow check box. If you have already saved the encryption key credentials for a controller, providing the path of the file updates the credentials for that controller. If the credentials are for a new controller, the details are appended in the same file.

If you have not saved the credentials to a file, you can provide the path on which the file must be saved. The path must contain a filename with an .xml extension. On applying changes, this file is created with the credentials.

If you delete the encryption key, you cannot create encrypted virtual disks and all encrypted unconfigured self-encrypting drives are erased. However, deleting an encryption key does not affect encryption or data in foreign disks. If you have saved the encryption key credentials to a file, deleting the encryption key does not delete the file. Managing the file is the responsibility of the administrator.