Skip to main content

Import storage array security key

The import storageArray securityKey file command unlocks one or more full disk encryption (FDE) drives that you have moved from one storage array to another storage array.

Supported Arrays​

If external key management is enabled, then this command applies only to the DE2000H/ DE4000H / DE4000F and DE6000H arrays. If internal key management is enabled, then the command applies to any individual storage array, as long as all SMcli packages are installed.

Roles​

To execute this command on an storage array, you must have the Security Admin role.

Context​

Only the drives with the matching security key are unlocked. After they are unlocked, the security key for the new storage array is applied.

Note
This command applies to both internal and external key management.

Syntax​

import storageArray securityKey file="<var id="GUID-0B9D66B6-61AA-476B-B636-FB5EB472F0D9__V1111142" className="keyword varname">fileName</var>" 
passPhrase="<var id="GUID-0B9D66B6-61AA-476B-B636-FB5EB472F0D9__V1111143" className="keyword varname">passPhraseString</var>"

Parameters​

ParameterDescription
file

The file path and the file name that has the original security key of the imported FDE drives. For example:


    file="C:\Program Files\CLI\sup\drivesecurity.slk"

Important
The file name must have an extension of .slk .
passPhrase The character string that provides authentication for the security key.

Notes​

The controller firmware creates a lock that restricts access to the FDE drives. FDE drives have a state called Security Capable. When you create a security key, the state is set to Security Enabled, which restricts access to all FDE drives that exist within the storage array.

Your pass phrase must meet these criteria:

  • Must be between eight and 32 characters long.

  • Must contain at least one uppercase letter.

  • Must contain at least one lowercase letter.

  • Must contain at least one number.

  • Must contain at least one non-alphanumeric character, for example, < > @ +.

Note
If your pass phrase does not meet these criteria, you will receive an error message and will be asked to retry the command.