Lock the SED drives using the authentication key

You can use the apsedkey enable command to apply a given AEK to all of the SED drives of Cloud Pak for Data System.

Procedure

  1. Log in as apadmin or equivalent user in any of the Control Nodes of the system.
  2. Run the following command to lock the SED drives of Cloud Pak for Data System using a given AEK: 
    apsedkey enable --file <file> --label <label>

    The command enables a key on the drives. It specifies the file that contains the key to use, and the label for the key in the key store.

    Sample output:

    [apadmin@e1n1]# apsedkey enable --file /tmp/key1.txt  --label mykey
Enabled key 'mykey'
/tmp/key1.txt can now be safely deleted.