Using the MegaRAID Advanced Software : LSI SafeStore Encryption Services : Supporting EKM Mode

Supporting EKM Mode
When you choose EKM for drive security, and decide to configure when EKM mode is supported, and EKMS is present, the application responds to different behaviors based on the scenarios that take place at that particular time.
The first scenario occurs when EKM is enabled, and the second scenario occurs when EKM is enabled and EKMS is present. The details of these scenarios are described further in this section.
Perform the following steps to configure, EKM mode is supported, and EKMS is present.
1.
Select the Physical tab in the left panel of the MegaRAID Storage Manager window, and select a controller icon.
2.
Select Go To>>Controller>>Enable Drive Security in the main navigation bar in the top portion of the MegaRAID Storage Manager window.
The Drive Security Choose Mode wizard appears, as shown in the following figure.
Figure 137 Drive Security Choose Mode
 
3.
Select External Key management (EKM).
4.
Click OK.
After you click OK, two scenarios occur based on the availability of EKMS.
Scenario # 1 - EKM is enabled
When EKM is enabled, you can see the confirmation message as shown in the following figure. The message displayed ensures that security is enabled on the controller using EKMS.
Figure 138 Confirm External Key Management Mode Enabled
 
 
*NOTE  
On the right hand side frame of the controller properties, in Drive Security Properties, you can see the key management mode is EKM.
Scenario # 2 - EKM is selected, and EKMS is not present
When EKM is selected and EKMS is not present, you have to restart the system. When you restart the system, the system restart message appears as shown in the following figure.
Figure 139 System Restart
 
When the system restarts the boot agent generates the security keys for the controller.