Configuring memory

You can encrypt and decrypt persistent memory for Intel® Optane™ DC Persistent Memory DIMMs.

Procedure

Complete the following procedure to encrypt and decrypt persistent memory.

From the XClarity Administrator menu, click Hardware > Servers. The Servers page is displayed with a tabular view of all managed servers (rack servers and compute nodes).
Select one or more servers that you want to configure.
Click All Actions > Security > Intel Optane PMEM Operation to display the Intel Optane PMEM Operation dialog.
Select the security operation that you want to perform.
- Enable security. Data that is written to the persistent memory region is encrypted using the specified passphrase.
  Important
  Record the encryption passphrase. The passphrase is required to authorize disabling security or erasing the encryption passphrase.
- Disable security. Data that is written to the persistent memory region is not encrypted.
  Data that is already stored in the persistent memory region remains encrypted and is still accessible.
  Note
  This action is available only when security is enabled, and the passphrase set. You must authorize this operation using the current passphrase. You can disable security for multiple DIMMs in the device only if all DIMMs share the same passphrase.
- Secure erase. Erases the encryption passphrase that is used to encrypt the data that is stored in the persistent memory region to ensure that data is unrecoverable.
  Note
  This action is available only when security is enabled, and the passphrase set. You must authorize this operation using the current passphrase.
- Secure erase without passphrase. Securely erases all the data that is stored in the persistent memory of the specified DIMMs in the device. After the secure erase, all data is unrecoverable.
  Note
  This action is available only when security is disabled and passphrase is not required.
If required, specify and confirm the passphrase.
Click OK.

Give feedback