跳转到主内容

如何以加密方式清理包含所有自加密磁盘(Self-Encryption Disk、SE)的系统

Views:
151
Visibility:
Public
Votes:
1
Category:
ontap-9
Specialty:
core
Last Updated:

适用场景

  • SED
  • FIPS
  • NSE
  • 加密

问题描述

 清理一个或多个自加密磁盘(Self-Encryption Disk、SE)会导致无法检索这些磁盘上的现有数据。此操作使用了SED的固有擦除功能来执行以下所有更改:

  • 将磁盘加密密钥更改为新的随机值
  • 将开机锁定状态重置为false
  • 将数据身份验证密钥(AK)设置为默认的制造安全ID (MSID)。
 
无法将磁盘加密密钥还原到其先前的值,这意味着您无法恢复SED上的数据
 
请格外小心地使用此命令。
 

 

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.