NVIDIA DGX A100 DU-09821-001 _v01|31
Chapter6. Managing the DGX A100
Self-Encrypting Drives
The NVIDIA DGX OS software supports the ability to manage self-encrypting drives (SEDs),
including setting an Authentication Key for locking and unlocking the drives on NVIDIA DGX
™
A100 systems. You can manage only the SED data drives.
The software cannot be used to manage OS drives even if they are SED-capable.
6.1. Overview
The SED management software is in the nv-disk-encrypt package.
The software supports the following configurations:
‣
NVIDIA DGX A100 systems where all data drives are self-encrypting drives.
‣
Only SEDs used as data drives are supported.
The software will not manage SEDs that are OS drives.
The software provides the following functionality:
‣
Identifies eligible drives on the system.
‣
Allows you to you assign Authentication Keys (passwords) for each SED as part of the
initialization process.
‣
Alternatively, the software can generate random passwords for each drive.
‣
The passwords are stored in a password-protected vault on the system.
‣
Once initialized, SEDs are locked upon power loss, such as a system shutdown or drive
removal.
Locked drives get unlocked after power is restored and the root file system is mounted.
‣
Provides functionality to export the vault.
‣
Provides functionality for erasing the drives.
‣
Provides the ability to revert the initialization.