Skip to main content

Enable volume group security

The enable volumeGroup security command converts a non-secure volume group to a secure volume group.

Supported Arrays​

This command applies to an individual DE2000H, DE4000H, DE4000F, DE6000H, or DE6000F storage array.

Roles​

To execute this command on an storage array, you must have the Storage Admin role.

Syntax​

enable volumeGroup [<var id="GUID-56E665D0-B53B-4E2F-AD34-F361A6148C15__V1111823" className="keyword varname">volumeGroupName</var>] security

Parameter​

ParameterDescription
volumeGroup The name of the volume group that you want to place in the Security Enabled state. Enclose the volume group name in square brackets ([ ]).

Notes​

These conditions must be met to successfully run this command.

  • All drives in the volume group must be full disk encryption drives.

  • The Drive Security feature must be enabled.

  • The storage array security key has to be set.

  • The volume group is Optimal, and it does not have repository volumes.

The controller firmware creates a lock that restricts access to the FDE drives. FDE drives have a state called Security Capable. When you create a security key, the state is set to Security Enabled, which restricts access to all FDE drives that exist within the storage array.