Enabling encryption with internal key management

The system supports enabling encryption that uses the internal boot drive to store encryption keys. Encryption with internal key management can be enabled by using the management GUI or the command-line interface.

Using management GUI

To enable the encryption with internal key management that uses the management GUI, complete these steps:
  1. In the management GUI, select Settings > Security > Encryption and click Enable Encryption.
  2. On the Welcome page, select Internal Key Management, then click Next.
  3. After all the validation checks are successfully performed, the encryption key is generated and securely stored on the internal boot drive.
  4. It is recommended to configure the Encryption Recovery Key along with the internal key management. For more information, see Encryption recovery key.

Using the command-line interface

To enable the encryption with internal key management, enter the following command:
chencryption -internal enable
The new key has been created successfully when the internal_key_status field shows enabled and internal_key_last_rekey_time field shows the timestamp of key generation upon executing lsencryption command. For more information, see chencryption and lsencryption commands.