Encrypting boot drive syntax on p408i smart array

[amcnaug]

Can anyone help with the syntax for enabling encryption on a Dl380 gen10 / P408i that's already got encryption enabled on a different controller?

I think its as below, but it keeps prompting to enter a new password.

controller slot=0 enableencryption eula=yes encryption=on masterkey=(snip) password=(snip)

ctrl slot=0 ld 1 encode preservedata=yes

Am I at risk of crashing my host if I enable encryption but the logical drive isn't encrypted yet?  // will this cut off access to the drive whle its encoding from plain text to encrypted ?

[TVVJ]

Hello,

You may refer to section "7.4 Encryption Manager" on page 38 of the HPE Smart Storage Administrator CLI User Guide for more information.

Regards,

[amcnaug]

@TVVJ I think I worked out part of it

At least needing to login as crypto user, setting enableencryption and than kicking off the encrypt

, but still need to know if it can be done "hot" / without interupting the host OS.

Also encountering when there's no other management function in progress

=>  ctrl slot=0 login user=crypto password=<snip>

Error: "HPE Smart Array P408i-a SR Gen10 in Slot 0 (Embedded)" is locked by

       another instance of a configuration utility.

[TVVJ]

Hello,

You may contact HPE Support for further assistance at HPE Support Center. Please document all that was performed so far, step by step and the result of each step so that the HPE Support Engineer is fully aware of what transpired and provide appropriate assistance.

Regards,

[Mr_Techie]

---

@amcnaug wrote:

@TVVJ I think I worked out part of it

At least needing to login as crypto user, setting enableencryption and than kicking off the encrypt

, but still need to know if it can be done "hot" / without interupting the host OS.

Also encountering when there's no other management function in progress

=>  ctrl slot=0 login user=crypto password=<snip>

Error: "HPE Smart Array P408i-a SR Gen10 in Slot 0 (Embedded)" is locked by

       another instance of a configuration utility.

---

It appears that the controller is locked by another instance of a configuration utility, which is preventing you from performing the encryption operation. To address this issue, you need to ensure that no other configuration utility is actively using the controller.

Below ones might help you,

1. Before attempting to log in and enable encryption, check if there are any active sessions or processes related to the Smart Array controller. Ensure that no other utility or process is currently using the controller.

ctrl all show config [Review the output to check for any ongoing processes or active sessions on the controller.]

2. If there is a background process or configuration operation in progress, wait for it to complete. Trying to perform multiple configuration changes simultaneously can result in conflicts.

3. Make sure there are no ongoing management functions, such as array expansion or logical drive modification, before attempting to enable encryption.

ctrl all show config detail [Review the detailed configuration information to check for any ongoing operations.]

4. Log out of the controller and retry the login and encryption commands after ensuring there are no conflicting operations.

ctrl slot=0 logout [ Once log out try to log in again and proceed with the encryption commands.]

ctrl slot=0 login user=crypto password=<snip>

ctrl slot=0 ld 1 modify encrypt=enable

5. As for performing encryption "hot" without interrupting the host OS, enabling encryption on a Smart Array controller typically allows the encryption process to occur in the background without disrupting the host OS.

If you still have the same issue, it's good to contact support for further assistance.

I'm not a Employee and I acknowledge that I may make mistakes or provide information that is not entirely accurate.