Nvidia DGX A100 User Manual page 41

D
isk(s) that cannot be used for encryption
+--------------+---------+--------------------------------------------------------------------------+
| Name | Serial |
+--------------+---------+--------------------------------------------------------------------------+
| /dev/nvme0n1 | xxxxx1 | SED capable = Y, Boot disk = Y, Locked = N, Lock Enabled = N, MBR done = N |
| /dev/sr0 | xxxxx2 | SED capable = N, Boot disk = N, Locked = N, Lock Enabled = N, MBR done = N |
| /dev/nvme1n1 | xxxxx3 | SED capable = Y, Boot disk = Y, Locked = N, Lock Enabled = N, MBR done = N |
| /dev/sda | unknown | SED capable = N, Boot disk = N, Locked = N, Lock Enabled = N, MBR done = N |
Alternatively, you can specify the output be presented in JSON format by using the -j
option.
$ sudo nv-disk-encrypt info -j
In this case, drives that can be used for encryption are indicate by
"sed_capable": true,
"used_for_boot": false
And drives that cannot be used for encryption are indicated by either
"sed_capable": true,
"used_for_boot": true
Or
"sed_capable": false,
6.5.1.2 Creating the Drive/Password Mapping JSON File and Using
it to Initialize the System
1
Create a JSON file that lists all the eligible SED-capable drives that you want to
manage.
These are the list of drives that you obtained from the section
Drives Can be Managed as Self-Encrypting"
The following example shows the format of the JSON file.
{
"/dev/nvme2n1": "<your-password>",
"/dev/nvme3n1": "<your-password>",
"/dev/nvme4n1": "<your-password>",
"/dev/nvme5n1": "<your-password>",
}
•
Be sure to follow the syntax exactly.
•
Passwords must consist of only upper-case letters, lower-case letters, digits, and/or
the following special-characters: ~ : @ % ^ + = _ ,
2
Initialize the system and then enable locking.
The following command assumes you have placed the JSON file in the /tmp
directory.
DGX A100 System User Guide
Chapter 6 : Managing the DGX A100 Self-Encrypting Drives
Status
.
|
"Determining Which
DU-09821-001_v01 | 35