Skip to main content

Disable external security key management

The disable storageArray externalKeyManagement file command disables external security key management for a storage array that has Full Disk Encryption drives.

Supported Arrays​

This command applies to an individual DE2000H, DE4000H, DE4000F, DE6000H, or DE6000F storage array.

Roles​

To execute this command on an storage array, you must have the Security Admin role.

Syntax​

disable storageArray externalKeyManagement 
file="<var id="GUID-FB6830E0-17FD-44D4-9124-66E452B904BA__V1191175" className="keyword varname">fileName</var>" 
passPhrase="<var id="GUID-FB6830E0-17FD-44D4-9124-66E452B904BA__V1191176" className="keyword varname">passPhraseString</var>"

Context​

Note
This command enables internal key management as the alternate form of Drive Security.
Note
This command applies only to external key management.

Parameters​

ParameterDescription
file

The file path and the file name where the internal security key file is stored. For example:


    file="C:\Program Files\CLI\sup\drivesecurity.slk"

Important
The file name must have an extension of .slk .
passPhrase A character string that encrypts the security key so that you can store the security key in an external file.

Notes​

Your pass phrase must meet these criteria:

  • Must be between eight and 32 characters long.

  • No whitespace.

  • Must contain at least one uppercase letter.

  • Must contain at least one lowercase letter.

  • Must contain at least one number.

  • Must contain at least one non-alphanumeric character, for example, < > @ +.

Note
If your pass phrase does not meet these criteria, you will receive an error message.