Lenovo ThinkSystem SN850 Setup Manual page 85

– Linux: Use ndctl command.
– VMware: Reboot the system, and VMware will create namespaces automatically.
After creating namespaces for App Direct capacity allocation, make sure to create and format filesystem
in the operating system so that the App Direct capacity is accessible for applications.
• Security
– Enable Security
Attention: By default, DCPMM security is disabled. Before enabling security, make sure all the country
or local legal requirements regarding data encryption and trade compliance are met. Violation could
cause legal issues.
DCPMMs can be secured with passphrases. Two types of passphrase protection scope are available
for DCPMM:
– Platform: Choose this option to run security operation on all the installed DCPMM units at once. A
platform passphrase is stored and automatically applied to unlock DCPMMs before operating
system starts running, but the passphrase still has to be disabled manually for secure erase.
Alternatively, enable/disable platform level security with the following commands in OneCLI:
• Enable security:
1. Enable security.
onecli.exe config set IntelOptaneDCPMM.SecurityOperation "Enable Security" --imm
USERID:PASSW0RD@10.104.195.86
2. Set the security passphrase.
onecli.exe config set IntelOptaneDCPMM.SecurityPassphrase "123456" --imm
USERID:PASSW0RD@10.104.195.86
Where 123456 stands for the passphrase.
3. Reboot the system.
• Disable security:
1. Disable security.
onecli.exe config set IntelOptaneDCPMM.SecurityOperation "Disable Security" --imm
USERID:PASSW0RD@10.104.195.86
2. Enter passphrase.
onecli.exe config set IntelOptaneDCPMM.SecurityPassphrase "123456" --imm
USERID:PASSW0RD@10.104.195.86
3. Reboot the system.
– Single DCPMM: Choose this option to run security operation on one or more selected DCPMM
units.
Notes:
• Single DCPMM passphrases are not stored in the system, and security of the locked units needs
to be disabled before the units are available for access or secure erase.
• Always make sure to keep records of the slot number of locked DCPMMs and corresponding
passphrases. In the case the passphrases are lost or forgotten, the stored data cannot be backed
up or restored, but you can contact Lenovo service for administrative secure erase.
• After three failed unlocking attempts, the corresponding DCPMMs enter "exceeded" state with a
system warning message, and the DCPMM unit can only be unlocked after the system is
rebooted.
.
Chapter 4 System configuration
77