Skip to main content

security key-manager config modify

Modify key management configuration options

Availability: This command is available to cluster administrators at the advanced privilege level.

Description​

This command modifies the key management configuration options.

Parameters​

[-cc-mode-enabled {true|false}] - Enable Common Criteria Mode
This parameter modifies the configuration state of the Onboard Key Manager (OKM) Common Criteria (CC) mode. CC mode enforces some of the policies required by the Common Criteria "Collaborative Protection Profile for Full Drive Encryption-Authorization Acquisition" (FDE-AA cPP) and "Collaborative Protection Profile for Full Drive Encryption-Encryption Engine" documents.

Examples​

The following command enables Common Criterial mode in the cluster:

cluster-1::*> security key-manager config modify -cc-mode-enabled true