Manage The Self Encryption Drive Authentication Key (Sed Ak) - Lenovo ThinkEdge SE360 V2 User Manual

• Significant Motion: The system detects the significant motion that indicates the system being
unexpectedly moved from the operating location. When a significant motion is detected, the system
enters System Lockdown Mode.
Chassis Intrusion Detection
When Chassis Intrusion Detection is Enabled, the system detects physical movements of the node covers. If
one of the node covers is opened unexpectedly, the system enters System Lockdown Mode automatically.

Manage the Self Encryption Drive Authentication Key (SED AK)

For ThinkEdge SE360 V2 with SED installed, the SED AK can be managed in Lenovo XClarity Controller. After
setting up the server or making changes to the configuration, backing up the SED AK is a must operation to
prevent data loss in the hardware failure case.
SED Authentication Key (AK) Manager
Log in to Lenovo XClarity Controller web interface, and go to BMC Configuration ➙ Security ➙ SED
Authentication Key (AK) Manager to manage the SED AK.
Notes: The operation of SED AK Manager is not allowed in the following conditions:
• System Lockdown Mode is in Active state. SED AK is locked until the system is activated or unlocked.
See "Activate or unlock the system" on page 357
• Current user does not have the authority to manage SED AK.
– To generate, backup, and recover the SED AK with passphrase or backup file, the role of XCC user
should be Administrator.
– To recover the SED AK from automatic backup, the role of XCC user should be Administrator+.
SED encryption
The status of SED encryption can be changed from Disabled to Enabled. Complete the following process to
enable SED encryption.
1. Press Enabled button.
2. Select the SED AK generation method:
• Generate key using Passphrase: Set the password and re-enter it for the confirmation.
• Generate key randomly: A Random SED AK will be generated.
3. Press Apply button.
Attention:
• Once SED encryptoin is Enabled, it cannot be changed back to Disabled.
• When SED encryption is enabled, rebooting the system is required after installing a drive; without
rebooting, the drive will not be recognized by the host OS.
Change the SED AK
• Generate key using Passphrase: Set the password and re-enter it for the confirmation. Click Re-
generate to get the new SED AK.
• Generate key randomly: Click Re-generate to get a Random SED AK.
Backup the SED AK
Set the password and re-enter it for the confirmation. Click Start Backup to backup the SED AK; then,
download the SED AK file and store it safely for future use.
to activate or unlock the system.
.
Chapter 7 System configuration
361