Lenovo ThinkEdge SE360 V2 User Manual page 282

The heat sinks and processors might be very hot. Turn off the server and wait several minutes to let
the server cool before removing the server cover.
Manage the Self Encryption Drive Authentication Key (SED AK)
For ThinkEdge SE360 V2 with SED installed, the SED AK can be managed in Lenovo XClarity Controller. After
setting up the server or making changes to the configuration, backing up the SED AK is a must operation to
prevent data loss in the hardware failure case.
SED Authentication Key (AK) Manager
Log in to Lenovo XClarity Controller web interface, and go to BMC Configuration ➙ Security ➙ SED
Authentication Key (AK) Manager to manage the SED AK.
Notes: The operation of SED AK Manager is not allowed in the following conditions:
• System Lockdown Mode is in Active state. SED AK is locked until the system is activated or unlocked.
See "Activate or unlock the system" on page 357
• Current user does not have the authority to manage SED AK.
– To generate, backup, and recover the SED AK with passphrase or backup file, the role of XCC user
should be Administrator.
– To recover the SED AK from automatic backup, the role of XCC user should be Administrator+.
SED encryption
The status of SED encryption can be changed from Disabled to Enabled. Complete the following process to
enable SED encryption.
1. Press Enabled button.
2. Select the SED AK generation method:
• Generate key using Passphrase: Set the password and re-enter it for the confirmation.
• Generate key randomly: A Random SED AK will be generated.
3. Press Apply button.
Attention:
• Once SED encryptoin is Enabled, it cannot be changed back to Disabled.
• When SED encryption is enabled, rebooting the system is required after installing a drive; without
rebooting, the drive will not be recognized by the host OS.
Change the SED AK
• Generate key using Passphrase: Set the password and re-enter it for the confirmation. Click Re-
generate to get the new SED AK.
• Generate key randomly: Click Re-generate to get a Random SED AK.
Backup the SED AK
Set the password and re-enter it for the confirmation. Click Start Backup to backup the SED AK; then,
download the SED AK file and store it safely for future use.
Note: If you use the backup SED AK file to restore a configuration, the system will ask for the password that
you set here.
ThinkEdge SE360 V2 User Guide
272
to activate or unlock the system.