Turning off the MBR settings on Intel disks

Deployment options: IBM Netezza Appliance

If you are on Netezza Performance Server 11.2.1.4 and lower, and the SPU key is enabled, turn off the MBR settings on the Intel disk before you upgrade.

You can also turn off MBR right after you generate a SPU key and set it on Intel disks on Netezza Performance Server 11.2.1.4 and lower.

Procedure

  1. Log in to any SPU and check whether a spukey was set on the disks.
    sedutil-cli --query  /dev/nvme1n1 | grep LockingEnabled
    Example:
    spu0104# sedutil-cli --query  /dev/nvme1n1 | grep LockingEnabled
Locked = N, LockingEnabled = Y, LockingSupported = Y, MBRDone = N, MBREnabled = Y, MediaEncrypt = Y
    • If LockingEnabled = Y, spukey is set. Go to step 2.
    • If LockingEnabled = N, you do not have to do anything.
  2. For each and every disk on every SPU, verify whether MBREnabled is Y.
    sedutil-cli --query /dev/nvmeXn1 | grep "MBREnabled = Y"
    Where
    X in nvmeXn1
    Specifies a value from 0 to 3 that corresponds to the enclosure number.
    Example: 
    spu0104# sedutil-cli --query /dev/nvme1n1 | grep  "MBREnabled = Y" 
Locked = N, LockingEnabled = Y, LockingSupported = Y, MBRDone = N, MBREnabled = Y, MediaEncrypt = Y
  3. Retrieve the SPU key by running the command on the host, on which the SPU key was generated.
    cat /nz/var/keystore/spukey
hExX996GJT33Y923/L9kCOijQ/42
  4. Turn off the MBR settings for the SPU keys from step 3 and disks for which the MBR setting was MBREnabled = Y in step 2.
    spu0101# sedutil-cli --setMBREnable off 'spukey' /dev/nvmeXn1
MBRDone set on
MBREnable set off
spu0101# sedutil-cli --setMBRDone off 'spukey' /dev/nvmeXn1
MBRDone set off
  5. Verify that the MBR setting was turned off successfully.
    spu0101# sedutil-cli --query  /dev/nvme1n1 | grep LockingEnabled
    Example:
    spu0104# sedutil-cli --query  /dev/nvme1n1 | grep LockingEnabled
Locked = N, LockingEnabled = Y, LockingSupported = Y, MBRDone = N, MBREnabled = N, MediaEncrypt = Y
  6. Repeat steps 2-5 until all MBR settings are turned off.