Explains procedures and best practices for managing self-encrypting drives within the system.
Cisco 8300 Series Secure Routers support self-encrypting drives (SED), which helps to enhance the security of data that are stored on these platforms. SEDs are locked using a security key. The security key, which is also known as Key-Encryption Key or an authentication passphrase is used to encrypt the media encryption key. If the disk is not locked, no key is required to retrieve the data. To enable the security lock, use the hw-module harddisk security-lock enable to enable the command. To disable the security lock, use the no hw-module harddisk security-lock enable command.
Also, you can perform these actions:
-
To check the security status, use the show hw-module harddisk security-lock status command.
-
To perform factory reset on the SED when the security-lock is enabled, use the factory-reset sed
-
To perform factory reset on the SED without checkig the status of the security-lock, use the factory-reset sed PSID command. The PSID (Physical Secure ID) is a 32 character ASCII string read from the label attached to the SED drive.