Enabling Drive Locking; Initialization Examples; 6.6.1 Example 1: Passing In The Json File; Determining Which Drives Can Be Managed As Self Encrypting - Nvidia DGX A100 User Manual

NVIDIA strongly recommends using this option for best security, otherwise the software
will use a default salt value instead of a randomly generated one.
-r: Generates random passwords for each drive. This avoids the need to create a JSON file

or the need to enter a password one by one during the initialization.
6.5

Enabling Drive Locking

After initializing the system for SED management, use the nv-disk-encrypt command to enable
drive locking by issuing the following.
$ sudo nv-disk-encrypt lock
After initializing the system and enabling drive locking, the drives will become locked when
they lose power. The system will automatically unlock each drive when power is restored to
the system and the system is rebooted.
6.6

Initialization Examples

6.6.1 Example 1: Passing in the JSON File

The following instructions describe a method for specifying the drive/password mapping ahead
of time. This method is useful for initializing several drives at a time and avoids the need to
enter the password for each drive after issuing the initialization command, or if you want
control of the passwords.
6.6.1.1 Determining Which Drives Can be Managed as Self
Encrypting
Review the storage layout of the DGX system to determine which drives are eligible to be
managed as SEDs.
$ sudo nv-disk-encrypt info
The default output shows which drives can be used for encryption and which drives cannot.
The following status information is provided:
SED capable: Is this a self-encrypting drive?

Boot disk: Is this drive currently being used as a boot drive? Does it contain the root

filesystem?
Locked: Is this drive currently in the locked state? Is it able to accept I/O?. It can only be in

this state after the following conditions have been met:
Locking has been enabled (nv-disk-encrypt init, followed by nv-disk-encrypt lock)
•
The drive is coming back from power-off
•
The user queries this state prior to it being (automatically) unlocked
•
DGX A100 System
Managing the DGX A100 Self-Encrypting Drives
DU-09821-001_v06 | 36