HPE MR416 RAID configuraion

[srsqrd]

I have a batch of new HPE DL360 Gen10+ systems that I have been working on configuring, but have been proving to be an issue.

These new servers came with the MR416i-a Gen10+ cards, which are looking to be the part of my install that is giving me issues.

When trying to configure them through Intelligent Provisioning (IP), the console will hang, then tell me I don’t have privileges. Then only bouncing the server seems to bring it back.

In doing some deep searching, it is recommended to have the latest SSP and the IP above 3.85, in which it seems implied that you should then be able to use IP for configuration.

I have patched my firmware to SPP 2023.09.00.00 and the IP to 3.88 and am still having issues.

I am able to configure the drives through the System Configuration (F9), which I can now see the MR card and drives in a RAID configuration in iLO, but it is telling me my drives are not encrypted.

Is the Self Encrypting Drives (SED) automatic? If so, what form of encryption is it using? FIPS-140-2?

Also, I am told we originally ordered the SR cards with these servers. Are the SR cards now EoL or just in short supply and they substituted these cards?

Scott

[SydUmar_1]

Hello Scott,
By Default, on all Gen10 Plus servers they come with MR controllers. Please do note that the SR controllers are not End of Life or there are no issues with the supply. 

Regarding the Self Encryting Drives, please find the instructions below to enable the Encrytpion -  :

1. From the System Utilities screen, select System Configuration > HPE MRXXX Gen10+ > Main Menu > Controller Management.
2. In the Controller Management screen, select Advanced Controller Management.
3. In the Advanced Controller Management screen, select Enable Drive Security.
4. For the Key Management Mode, select either Local Key Management (LKM) or External Key Management (EKM).
5. Optional. If you have selected Local Key Management (LKM), do the following:
   1. Enter the required data on the screen. You are allowed to set the Security Key Identifier, Security Key, and Password at Boot Time.
   2. Select the I Recorded the Security Settings for Future Reference check box.
   3. Click Enable Drive Security.
6. Optional. If you have selected External Key Management (EKM), do the following:
   1. Make sure that the iLO key manager is properly configured only then you can select External Key Management (EKM). For more information, see Using Enterprise Secure Key Manager with iLO in the iLO Userguide - https://support.hpe.com/hpesc/public/docDisplay?docId=a00105236en_us 
   2. Click Enable Drive Security.
   3. Reboot the system.

      The controller retrieves the SED drive keys from the remote HPE Enterprise Secure Key Manager server only during power-up. It communicates to iLO through the BIOS.

[srsqrd]

Syd,

  Thank you for your reply. I have followed this, but with the Self Encrypting Drive enabled, in iLO the volumes are showinig as "Encrypted  False". Also, I have scoured the sources I can find looking for documentation on what type of encryptioin is used. The only thing the documentation seems to say is that the volume is self encrypting. Is it using FIPS-140-2 or some other standard, as I need to be able to document this.

Thanks,

Scott

[SydUmar_1]

Hello Scott,
We do not see any known issues with the Self Encrypting Drives to report Encryption False on the iLO interfacee. Would recommend you to log a support ticket with us to investigate the issue further. 

Regarding the Security Standards, SR controllers were of FIPS mode standards. However, MR controllers are not FIPS mode compliant and they have thier own self encrypting standards. 

[PAM2]

@srsqrd Hi, is there any update on this case
We also have similar issue with this one, while the Self Encryption Drives (Enable) but Encryption False on the iLO interface.
HPE DL360 Gen 11 (ILO6)

[Sunitha_Mod]

Hello @PAM2,

Thank you for writing to us. 

You might want to consider creating a new topic by utilizing the "New Discussion" button, as this will not only enhance visibility compared to the old topic but also boost your chances of receiving responses from experts.