Skip to main content

Drive locked – drive security key required

Drive locked – drive security key required

This problem occurs for the following reasons:

  • A problem is preventing the storage array from obtaining the drive's security key from the key management server

  • A drive from different storage array that was a part of a secure-enabled pool or volume group was inserted into the storage array

  • All of the storage array's controllers have been recently replaced

Important
All locked drives that have the same security key identifier will be unlocked at the same time after the unlock procedure is complete.
CAUTION
Electrostatic discharge can damage sensitive components

Always use proper antistatic protection when handling components. Touching components without using a proper ground may damage the equipment.

Recovery Steps​

  1. Are any Security Key - Multiple Security Keys Required, Key Management Certificate Expired, Key Management Server Pinned Certificate Invalid, Key Management Server Client Certificate Invalid, Key Management Server Connection Failed, or Key Management Server Error problems being reported in the Problems area?

    • If yes, correct the problems using the recovery steps in the associated procedure listed in the Problems area. This should resolve this problem as well.

    • If no, go to step 2.

  2. Was one or more drives removed from a different storage array and inserted into this storage array?

    • If yes, go to step 3.

    • If no, go to step 7.

  3. Has a security key been created on this storage array?

    • If yes, go to step 7.

    • If no, go to step 4.

  4. Do you want the storage array's security key to be managed by the storage array or by an external key management server?

    • If you want the storage array's security key to be managed by the storage array, go to step 5.

    • If you want the storage array's security key to be managed by a key management server, go to step 6.

  5. Create an internal security key and then go to step 10.

    1. Go to Settings > System.

    2. Select the Create Internal Key link in the Security key management section and create an internal security key.

    3. Go to step 10.

  6. Create an external security key and then go to step 10.

    1. Go to Settings > System.

    2. Select the Complete and download a client certificate signing request (CSR) link in the Security key management section and download a CSR file from the storage array.

    3. Create and download a client certificate from the key management server using the downloaded csr file.

    4. Ensure the client certificate and the server certificate for the key management server are available on your local host.

    5. Select the Create External Key link in the Security key management section and create an external security key.

    6. Go to step 10.

  7. Were all of the storage array's controllers recently replaced?

    • If yes, go to step 8.

    • If no, go to step 10.

  8. Are all of the drives in the storage array currently locked?

    • If yes, go to step 10.

    • If no, go to step 9.

  9. Change the storage array's security key.

    1. Go to Settings > System.

    2. Select the Change Key link located in the Security key management section and change the storage array's security key.

  10. Unlock the affected drives by Importing the drives' security key.

    1. Obtain the security keys shown in the Details area and ensure that they are available on your local host.

    2. Go to Settings > System.

    3. Select the Unlock Secure Drives link in the Security key management section and import one of the affected security keys.

    4. Repeat step c for each security key shown in the Details area.

  11. Select Recheck to ensure the problem has been resolved.