Skip to main content

Rotating authentication keys for Lenovo Storage Encryption

You can rotate authentication keys when using Lenovo Storage Encryption (LSE).

About this task

Rotating authentication keys in an LSE environment is supported if you are using External Key Manager (KMIP).
Note
Rotating authentication keys in an LSE environment is not supported for Onboard Key Manager (OKM).
  1. Use the security key-manager create-key command to generate new authentication keys.
    You need to generate new authentication keys before you can change the authentication keys.
  2. Use the storage encryption disk modify -disk * -data-key-id command to change the authentication keys.