News
Abstract
All NVMe devices supported by IBM® i are Self-Encrypting Drives (SED). This means the data is encrypted at rest. However, the key used to encrypt and decrypt the data is not protected. By creating a password policy and adding NVMe devices to it, the devices can protect the confidentiality of stored user data against unauthorized access once the device leaves the owner’s control. This feature uses the Trusted Computer Group (TCG) Opal Security Subsystem Class (SSC) specification for storage. Each NVMe device that supports the Opal SSC is registered in a list of devices on which the administrator can establish a locking policy. Once the device is added to the locking policy the NVMe device will lock itself when Main Power loss or PCIe cold resets occur.
Content
Was this topic helpful?
Document Information
Modified date:
08 November 2022
UID
ibm16828351