106 Configuration: Disk Groups and Virtual DisksThe Create a secure disk group option appears in the Create Disk GroupWizard - Disk Group Name and Physical Disk Selection dialog. The Create asecure disk group option is active only when these conditions are met:• A security key is installed in the storage array.• At least one security capable physical disk is installed in the storage array.• All of the physical disks that you selected on the Physical tab are securitycapable physical disks.You can erase security-enabled physical disks so that you can reuse the drivesin another disk group or in another storage array. When you erase security-enabled physical disks, ensure that the data cannot be read. When all of thephysical disks that you have selected in the Physical pane are security enabled,and none of the selected physical disks is part of a disk group, the SecureErase option appears in the Physical Disk menu.The storage array password protects a storage array from potentiallydestructive operations by unauthorized users. The storage array password isindependent from self encrypting disk, and should not be confused with thepass phrase that is used to protect copies of a security key. However, it is goodpractice to set a storage array passwordCreating a Security KeyWhen you create a security key, it is generated by and securely stored by thearray. You cannot read or view the security key. A copy of the security key mustbe kept on some other storage medium for backup in case of system failure orfor transfer to another storage array. A pass phrase that you provide is used toencrypt and decrypt the security key for storage on other media.When you create a security key, you also provide information to create asecurity key identifier. Unlike the security key, you can read or view thesecurity key identifier. The security key identifier is also stored on a physicaldisk or transportable media. The security key identifier is used to identifywhich key the storage array is using.
