Firmware Lock

Prevents controller firmware from being modified unintentionally or by unauthorized personnel.

Supported Remote Secure Key Managers (Remote Mode Only)

See the iLO QuickSpecs document for details on supported remote secure key managers.

HPE Smart Storage Administrator

HPE Smart Storage Administrator (HPE SSA) v1.60.xx.0 and later provides the configuration and management of the cryptographic features of HPE Smart Array SR Secure Encryption associated with the controller.

Integrated Lights Out

HPE iLO Management is a comprehensive set of embedded management features supporting the complete lifecycle of the server, from initial deployment, through ongoing management, to service alerting and remote support. HPE iLO Management comes standard on all HPE ProLiant Gen8, Gen9, and Gen10 servers.

HPE iLO Advanced or Scale Out editions v 1.40 or later connect and auto register with the supported remote secure key manager. HPE iLO provides key exchange support between the controllers and the remote secure key manager to enable pre-boot support for OS disk encryption. Audit support is provided for all key management transactions.

Notes: For more information on iLO, visit: http://www.hpe.com/info/ilo

Instant Volume Erase

Ability to instantly cryptographically erase volumes.

Key Management Modes

Local Key Management Mode provides a simple key management solution, using just HPE SSA. Local Mode is focused on single server deployments where there is one Primary Key per controller that is managed by the user. All volumes still have their own unique key(s) for data encryption.

WARNING: Hewlett Packard Enterprise recommends that you keep a record of the Primary Keys when encryption is configured in Local Mode. The Local Primary Key is never displayed by any available tool or firmware because it is considered a cryptographic secret and should be protected as such. HPE Smart Array SR Secure Encryption design follows NIST architecture requirements and does not allow Hewlett Packard Enterprise to assist in the recovery of the Primary Key.

Remote Key Management Mode allows for the central management and secure key storage for all HPE Smart Array SR Secure Encryption keys. The remote secure key manager scales to support over 25,000 attached devices and millions of encryption keys. Remote Key Management Mode requires Integrated Lights Out (iLO) Advanced or Scale Out editions v1.40 or later and supported remote secure key manager.

Notes: Mixing SR and MR controllers within the same system is neither supported nor recommended. However, an exception exists for the HPE Smart Array E208e-p SR Gen10 Controller, which is supported when installed with MR Gen10+, Gen11 controllers in Gen10, Gen10+, Gen11, and Gen12 servers.

Notes: For Smart Array Controllers on Gen11 and beyond, remote Controller Based Encryption and One Button Secure Erase (OBSE) are not supported.

Key Rotation

Supports rekeying of all keys utilized by the controller to enable a robust key rotation strategy.

One-way Encryption

The HPE Smart Array SR Secure Encryption design is such that after a data-at-rest volume is encrypted, it cannot be converted back to plaintext. Restoration of data is required to revert back to plaintext.

Pre-deployment Support

Supports the ability to preconfigure all cryptographic security settings while in a server, then store the powered off controller for later use while retaining the security settings.

Security Reset Function

The feature clears all keys and passwords from the controller and places the controller’s encryption configuration in a factory new state.

Two Encryption Roles

HPE Smart Array SR Secure Encryption supports two roles for managing encryption services, a crypto officer role and a user role that has reduced privileges.

Volume Level Encryption

HPE Smart Array SR Secure Encryption provides flexibility in allowing the user to selectively encrypt at the volume level, regardless of RAID level.

Warranty

HPE Smart Array SR Secure Encryption has a 90-day media replacement from date of customer purchase. Services and support, beyond the 90-day warranty, is covered through the supported HPE Smart Array controllers.

HPE Smart Array Secure Encryption Supporting Document

For additional information, see the HPE Smart Array SR Secure Encryption Installation and User Guide.

HPE Tech Care Service

HPE Tech Care Service is the operational support service experience for HPE products. The service goes beyond traditional support by providing access to product specific experts, an AI-driven digital experience, and general technical guidance to not only reduce risk but constantly search for ways to do things better. HPE Tech Care Service delivers a customer-centric, AI driven, and digitally enabled customer experience to move your business forward. HPE Tech Care Service is available in three response levels. Basic, which provides 9x5 business hour availability and a 2-hour response time. Essential, which provides a 15-minute response time 24x7 for most enterprise level customers, and Critical, which includes a 6-hour repair commitment where available and outage management response for severity 1 incidents.

https://www.hpe.com/services/techcare

HPE Lifecycle Services

HPE Lifecycle Services provide a variety of options to help maintain your HPE systems and solutions at all stages of the product lifecycle. A few popular examples include:

• − Lifecycle Install and Startup Services: Various levels for physical installation and power on, remote access setup, installation and startup, and enhanced installation services with the operating system.
• − HPE Firmware Update Analysis Service: Recommendations for firmware revision levels for selected HPE products, taking into account the relevant revision dependencies within your IT environment.
• − HPE Firmware Update Implementation Service: Implementation of firmware updates for selected HPE server, storage, and solution products, taking into account the relevant revision dependencies within your IT environment.
• − Implementation assistance services: Highly trained technical service specialists to assist you with a variety of activities, ranging from design, implementation, and platform deployment to consolidation, migration, project management, and onsite technical forums.
• − HPE Service Credits: Access to prepaid services for flexibility to choose from a variety of specialized service activities, including assessments, performance maintenance reviews, firmware management, professional services, and operational best practices.

Notes: To review the list of Lifecycle Services available for your product go to: https://www.hpe.com/services/lifecycle

For a list of the most frequently purchased services using service credits, see the HPE Service Credits Menu