Section: ipmctl (1)
ipmctl-enable-device-security - Enable data-at-rest security on DCPMM
This command is subject to OS Vendor (OSV) support. It will return "Not Supported."
ipmctl set [OPTIONS] -dimm [TARGETS] NewPassphrase=(string)ConfirmPassphrase=(string)
Enable data-at-rest security for the persistent memory on one or more DCPMMsby setting a passphrase.
- Displays help for the command.
- File path to a local file containing the new passphrase (1-32 characters).
The file does not need to contain the ConfirmPassphrase property
- Set the passphrase on specific DCPMMs by supplying one or more commaseparated DCPMM identifiers. However, this is not recommended as itmay put the system in an undesirable state. The default is to set thepassphrase on all manageable DCPMMs.
- The new passphrase (1-32 characters). For better passphrase protection,specify an empty string (e.g., NewPassphrase="") to be prompted for thepassphrase or to use a file containing the passphrase with the source option.
- Confirmation of the new passphrase (1-32 character and must matchNewPassphrase). For better passphrase protection, specify an empty string(e.g., ConfirmPassphrase="") to be prompted for the passphrase or to use afile containing the passphrase with the source option.
Set a passphrase on DIMM 0x0001.
ipmctl set -dimm 0x0001 NewPassphrase=123 ConfirmPassphrase=123
Sets a passphrase on DCPMM 0x0001 by supplying the passphrase in the filemypassphrase.file. In this example, the format of the file would be:
ipmctl set -source mypassphrase.file -dimm 0x0001 NewPassphrase="" ConfirmPassphrase=""
In order to successfully execute this command:
The caller must have the appropriate privileges. The specified DCPMM musthave security disabled and be manageable by the host software.
There must not be any goal creation pending.
Command is subject to OS Vendor (OSV) support. If OSV does not provide support,command will return "Not Supported."
If empty strings are provided for the passphrase properties and the source option is notincluded, the user will be prompted (once for all DCPMMs) to enter the newpassphrase and then again to confirm the new passphrase as described below. Thepassphrase characters will be hidden.
New passphrase: ****
Confirm new passphrase: ****
For each DCPMM, the CLI will indicate the status of the set passphraseoperation. If a failure occurs when setting the passphrase on multiple DCPMMs,the process will exit and not continue updating the remaining DCPMMs.
Set passphrase on DIMM (DimmID): SuccessSet passphrase on DIMM (DimmID): Error (Code) - (Description)
- RETURN DATA
- SAMPLE OUTPUT
This document was created byman2html,using the manual pages.