Skip to main content

Pre-replacement tasks for systems that use Storage Encryption

If you are replacing a controller module in a system with Storage Encryption enabled, you must first reset the authentication keys of the disks to their MSID (the default security ID set by the manufacturer). This is a temporary necessity to avoid losing access to the data.

After resetting the authentication keys to the MSID, the data on the disks is no longer protected by secret authentication keys. You must ensure the physical safety of the disks during the replacement or upgrade process.
  1. Set the privilege level to advanced: set -privilege advanced
  2. Reset the MSID using the instructions in the "Returning SEDs to unprotected mode" section.

    ONTAP 9 Encryption Power Guide

  3. Exit advanced mode:set -privilege admin