Encrypted Arrays with LSI SafeStore - Revision history

Digimer: /* Using BIOS Configuration Utility */

2015-09-23T23:56:02Z

Using BIOS Configuration Utility

← Older revision		Revision as of 23:56, 23 September 2015
Line 149:		Line 149:

	=== Using BIOS Configuration Utility ===		=== Using BIOS Configuration Utility ===

			[[Image:lsi-safestore-bios_01.png\|thumb\|center\|640px\|The prompt to enter the "''BIOS Configuration Utility''".]]

			Press '<span class="code"><ctrl> + <r></span>' to enter the "''BIOS Configuration Utility''".

			[[Image:lsi-safestore-bios_02.png\|thumb\|center\|640px\|The default "''BIOS Configuration Utility''" page.]]

			The first screen will show the list of drives under the first controller. If you have two controllers, be sure to press '<span class="code"><f12></span>' to be sure you are working on the desired controller.

			[[Image:lsi-safestore-bios_03.png\|thumb\|center\|640px\|Navigate to highlight the controller.]]

			Press the up arrow to navigate to the controller.

			[[Image:lsi-safestore-bios_04.png\|thumb\|center\|640px\|Open the "''Operations''" menu and navigate to the "''Advanced Software Options''" menu item.]]

			Press '<span class="code"><f2></span>' to open the "''Operations''" menu and navigate to the "''Advanced Software Options''" menu item and press '<span class="code"><enter></span>'.

			[[Image:lsi-safestore-bios_05.png\|thumb\|center\|640px\|Confirm that "''SafeStore''" is licensed as "''Unlimited''".]]

			Verify that the "''SafeStore''" option is listed and that its license shows as "''Unlimited''".

			{{note\|1=There are two ways to get "''SafeStore''"; Either as a [[Encrypted_Arrays_with_LSI_SafeStore#Software_Key\|software key]] or using a physical key plugged into the controller directly. If you do not see "''SafeStore''" in the list, please consult your hardware vendor on the best way to purchase "''SafeStore''".}}

Digimer: /* Encrypting the Data */

2015-09-23T19:19:53Z

Encrypting the Data

← Older revision		Revision as of 19:19, 23 September 2015
Line 145:		Line 145:

	== Encrypting the Data ==		== Encrypting the Data ==

			Depending on your model of controller, you will use either the older graphical 'WebBIOS' utility or the newer text-based 'BIOS Configuration Utility'. If your controller prompts you to press "<span class="code"><ctrl> + <h></span>", you will use 'WebBIOS'. If your controller prompts you to press "<span class="code"><ctrl> + <r></span>", you will enter the 'BIOS Configuration Utility'.

			=== Using BIOS Configuration Utility ===


			<span class="code"></span>

			=== Using WebBIOS ===

	{{note\|1=Any existing virtual disks that you wish to encrypt will need to be recreated, causing their data to be lost.}}		{{note\|1=Any existing virtual disks that you wish to encrypt will need to be recreated, causing their data to be lost.}}

Digimer: /* Getting the License from LSI */

2015-06-06T00:43:45Z

Getting the License from LSI

← Older revision		Revision as of 00:43, 6 June 2015
Line 59:		Line 59:
	After purchasing the software key, you will get a '''License Authentication Code''' (LAC). This will be used in a moment.		After purchasing the software key, you will get a '''License Authentication Code''' (LAC). This will be used in a moment.

	~~Create (or log~~ into) LSI's [https://softwarelicense.lsi.com/poeticWeb/session/login.htm Advanced Software License Management Portal].		Log into LSI's [https://softwarelicense.lsi.com/poeticWeb/session/login.htm Advanced Software License Management Portal].

	If you don't have an account, you will need to enter an LAC to start the account creation process.		If you don't have an account, you will need to enter an LAC to start the account creation process.

	{{note\|1=For this tutorial, we are using the Fujitsu ~~D3116C~~ controller.}}		{{note\|1=For this tutorial, we are using the Fujitsu [http://globalsp.ts.fujitsu.com/dmsp/Publications/public/ds-praid-ep400i-ep420i.pdf EP420i] controller.}}

	On the next window, you will be asked to enter the controller description.		On the next window, you will be asked to enter the controller description.

	* LAC or SCN #: <enter the LAC key given to you when you purchased SafeStore		* LAC or SCN #: <enter the LAC key given to you when you purchased SafeStore
	* RAID Controller ~~or Nytro Card~~ Name: <enter a unique name to identify the controller, the ~~host name is useful~~>		* RAID Controller Name: <enter a unique name to identify the controller. I like "<span class="code">RX2540 M1 sn: xxxxxx</span>" which is the make and SN of the node with the controller>

	Once entered, press "<span class="code">Activate</span>".		Once entered, press "<span class="code">Activate</span>".

Digimer: /* Keys */

2015-06-06T00:27:34Z

Keys

@@ Line 12: / Line 12: @@
 You will need each controller's serial number and SafeID in order to activate the purchased license.
 === Getting the Serial Number and SafeID via WebBIOS ===
@@ Line 18: / Line 38: @@
 * Click on <span class="code">Advanced Software Options</span> from the main page.
-* The <span class="code">SafeID</span> and <span class="code">Serial Number</span> will be shown below the existing license box. Note these down carefully as they are long strings.
+* The <span class="code">SafeID</span> and <span class="code">Serial Number</span> will be shown below the existing license box.
 === Getting the Serial Number and SafeID via storcli64 ===

Digimer: Digimer moved page LSI SafeStore to Encrypted Arrays with LSI SafeStore: More descriptive name

2014-12-31T05:27:43Z

Digimer moved page LSI SafeStore to Encrypted Arrays with LSI SafeStore: More descriptive name

← Older revision		Revision as of 05:27, 31 December 2014
(No difference)

Digimer: Digimer moved page LSI-SafeStore to LSI SafeStore: dashes because why?

2014-12-20T20:47:11Z

Digimer moved page LSI-SafeStore to LSI SafeStore: dashes because why?

← Older revision		Revision as of 20:47, 20 December 2014
(No difference)

Digimer: /* Anvil! Self-Destruct */

2014-12-03T18:18:52Z

Anvil! Self-Destruct

← Older revision		Revision as of 18:18, 3 December 2014
Line 372:		Line 372:
	== Anvil! Self-Destruct ==		== Anvil! Self-Destruct ==

	All of the steps listed above have been automated as part of the <span class="code">anvil-self-destruct</span> program.		All of the steps listed above have been automated as part of the <span class="code">[https://github.com/digimer/striker/blob/master/tools/anvil-self-destruct anvil-self-destruct]</span> program.

	{\|class="wikitable"		{\|class="wikitable"

Digimer: /* Getting the License from LSI */

2014-12-03T18:17:36Z

Getting the License from LSI

← Older revision		Revision as of 18:17, 3 December 2014
Line 41:		Line 41:
	If you don't have an account, you will need to enter an LAC to start the account creation process.		If you don't have an account, you will need to enter an LAC to start the account creation process.

	{{note\|1=For this tutorial, we are using the Fujitsu D3116C controller~~, which is based on the LSI 9260-8i~~.}}		{{note\|1=For this tutorial, we are using the Fujitsu D3116C controller.}}

	On the next window, you will be asked to enter the controller description.		On the next window, you will be asked to enter the controller description.

Digimer: /* Entering the SafeStore Activation Key via storcli64 */

2014-12-03T18:17:02Z

Entering the SafeStore Activation Key via storcli64

← Older revision		Revision as of 18:17, 3 December 2014
Line 81:		Line 81:
	</syntaxhighlight>		</syntaxhighlight>
	<syntaxhighlight lang="text">		<syntaxhighlight lang="text">
			<TODO: get sample output>
	</syntaxhighlight>		</syntaxhighlight>
	\|}		\|}

Digimer at 18:16, 3 December 2014

2014-12-03T18:16:35Z

← Older revision		Revision as of 18:16, 3 December 2014
Line 20:		Line 20:
	* The <span class="code">SafeID</span> and <span class="code">Serial Number</span> will be shown below the existing license box. Note these down carefully as they are long strings.		* The <span class="code">SafeID</span> and <span class="code">Serial Number</span> will be shown below the existing license box. Note these down carefully as they are long strings.

	=== Getting the Serial Number and SafeID via ~~MegaCli64~~ ===		=== Getting the Serial Number and SafeID via storcli64 ===

	{\|class="wikitable"		{\|class="wikitable"
	!<span class="code">node</span>		!<span class="code">node</span>
	\|style="white-space: nowrap;"\|<syntaxhighlight lang="bash">		\|style="white-space: nowrap;"\|<syntaxhighlight lang="bash">
	~~MegaCli64 AdpAllInfo a0~~ \| grep "~~Serial No~~" ~~&& MegaCli64 ELF GetSafeId a0 \| grep~~ "~~Safe ID~~"		storcli64 /c0 show all \| grep -e "Safe ID" -e "Serial Number"
	</syntaxhighlight>		</syntaxhighlight>
	<syntaxhighlight lang="text">		<syntaxhighlight lang="text">
	Serial ~~No :~~ xxxxxxxxxxxxxxxx		Serial Number = xxxxxxxxxxxxxxxx
	Safe ID is yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy		Safe ID = yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
	</syntaxhighlight>		</syntaxhighlight>
	\|}		\|}
Line 54:		Line 54:
	If you are an existing user, you will enter your registered email address and password.		If you are an existing user, you will enter your registered email address and password.

	Once logged in, you will be presented with the entitlement and a form to enter the controller's "<span class="code">Serial Number</span>" and "<span class="code">Safe ID</span>". To get this information, you can either look at the controller's information it the controller's BIOS or you can retrieve it via "<span class="code">~~MegaCli64~~</span>".		Once logged in, you will be presented with the entitlement and a form to enter the controller's "<span class="code">Serial Number</span>" and "<span class="code">Safe ID</span>". To get this information, you can either look at the controller's information it the controller's BIOS or you can retrieve it via "<span class="code">storcli64</span>".

	* Enter the <span class="code">Serial Number</span> and <span class="code">Safe ID</span> into the form and the press <span class="code">Next</span>.		* Enter the <span class="code">Serial Number</span> and <span class="code">Safe ID</span> into the form and the press <span class="code">Next</span>.
Line 71:		Line 71:
	Exit and reboot your server now. Re-enter the WebBIOS with <span class="code">ctrl + h</span> when prompted to begin encryption configuration.		Exit and reboot your server now. Re-enter the WebBIOS with <span class="code">ctrl + h</span> when prompted to begin encryption configuration.

	=== Entering the SafeStore Activation Key via ~~MegaCli64~~ ===		=== Entering the SafeStore Activation Key via storcli64 ===

	You will get an email with the activation key. This is what we will enter into the controller to enable the SafeStore option. You can either manually enter this key into the controller via the controller's BIOS, or you can enter it using the <span class="code">~~MegaCli64~~</span> tool, which we will do.		You will get an email with the activation key. This is what we will enter into the controller to enable the SafeStore option. You can either manually enter this key into the controller via the controller's BIOS, or you can enter it using the <span class="code">storcli64</span> tool, which we will do.

	{\|class="wikitable"		{\|class="wikitable"
	!<span class="code">node</span>		!<span class="code">node</span>
	\|style="white-space: nowrap;"\|<syntaxhighlight lang="bash">		\|style="white-space: nowrap;"\|<syntaxhighlight lang="bash">
	~~MegaCli64 -elf applykey~~ key zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz ~~-a0~~		storcli /c0 set aso key=zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz
	</syntaxhighlight>		</syntaxhighlight>
	<syntaxhighlight lang="text">		<syntaxhighlight lang="text">
	~~Successfully applied the Activation key. Please restart the system for the changes to take effect.~~

	~~FW error description:~~
	~~To complete the requested operation, please reboot the system.~~

	~~Exit Code: 0x59~~
	</syntaxhighlight>		</syntaxhighlight>
	\|}		\|}