Intel Raid RMS3AC160 and Intel SSD DC S3520

[Emanuel_A_Intel1]

Hi guys,

I have a server with a RAID controller (RMS3AC160) and 24 Intel SSD DC S3520.

I'm trying to do hardware encryption on SSD (using RAID 50 or 60). I've just installed the Premium Key AXXRPFKDE2 that enables full disk encryption. After setup the key, looks like the controller is encrypted (shows a key in front of the name) and the properties says:

Drive Security Properties

Drive security enabled: Yes

Drive security method: FDE Only

Drive security capable: Yes

For the drives says:

Drive Security Properties

Full Disk Encryption capable: No

Secured: No

Data Protection Properties

Data Protection: Incapable

According to info about the drives, they supposed to be capable of full disk encryption.

Why doesn't encrypt the drives? I've deleted the RAID and created a new one and the option about encryption is grayed out with no option to choose drive encryption at beginning.

I want to do hardware encryption, not software encryption. If I use BitLocker is only software and take a lot of time to encrypt.

Any suggestions for my problem?

Thank you,

Emyshor.

[idata]

Hello Emanuel,

Regarding your question, "Problems enabling HW Encryption". Using Intel Raid RMS3AC160 and Intel SSD DC S3520 with the Premium key AXXRPFKDE2. I am sorry on the problem encounter. Please download this PDF file:https://www.google.com/url?sa=t&source=web&rct=j&url=https://www.intel.com/content/dam/support/us/en/documents/server-products/raid-products/SWUG_full_featured_entry_RAID.pdf&ved=0ahUKEwiw98D85-fWAhWHQiYKHd1sBAQQFgglMAA&usg=AOvVaw2IyWIjRN1Kzc8-cgLMi8aL https://www.google.com/url?sa=t&source=web&rct=j&url=https://www.intel.com/content/dam/support/us/en/documents/server-products/raid-products/SWUG_full_featured_entry_RAID.pdf&ved=0ahUKEwiw98D85-fWAhWHQiYKHd1sBAQQFgglMAA&usg=AOvVaw2IyWIjRN1Kzc8-cgLMi8aLGo to page 68, Section 5.2.17, which will provide you with additional steps for the sertup. If there is anything else we can help please feel free to ask.Best regards, Henry A.

[Emanuel_A_Intel1]

Hi Henry,

Like I've said above, I've already did that "After setup the key, looks like the controller is encrypted". My problem is making those SSD also encrypted, not only the controller.

After doing more digging I've found out that the drives need to be TCG-E compliant since the Broadcom MegaRAID® SafeStore™ use TCG-E to encrypt drives.

So, what do you think will be the fix (or next step) for this problem? Swap all the drives with TCG-E compliant drives, or something else?

Thanks,

Emyshor.

[idata]

Hello Emanuel,

Regarding your question, "Problems enabling HW Encryption". Using Intel Raid RMS3AC160 and Intel SSD DC S3520 with the Premium key AXXRPFKDE2. I am sorry on the problem encounter. Please download this PDF file:https://www.google.com/url?sa=t&source=web&rct=j&url=https://www.intel.com/content/dam/support/us/en/documents/server-products/raid-products/SWUG_full_featured_entry_RAID.pdf&ved=0ahUKEwiw98D85-fWAhWHQiYKHd1sBAQQFgglMAA&usg=AOvVaw2IyWIjRN1Kzc8-cgLMi8aL https://www.google.com/url?sa=t&source=web&rct=j&url=https://www.intel.com/content/dam/support/us/en/documents/server-products/raid-products/SWUG_full_featured_entry_RAID.pdf&ved=0ahUKEwiw98D85-fWAhWHQiYKHd1sBAQQFgglMAA&usg=AOvVaw2IyWIjRN1Kzc8-cgLMi8aLGo to page 68, Section 5.2.17, which will provide you with additional steps for the setup. If there is anything else we can help please feel free to ask.Best regards, Henry A.

[idata]

Hello Emanuel,

Thank you for your update. At this moment could be a problem either with the SSD or the RAID controller and or the KEY.I will start by testing a different set of SSD and if the problem persists, if you have access to another RAID Controller to test the key and the SSD.Request for a KEY replacement. If there is anything else we can help please feel free to ask.Best regards, Henry A.

[idata]

Hello Emyshor,

Thank you for your update. I just will like to follow up and ask if you had time to run the test that I send you before. If there is anything else we can help please feel free to ask.Best regards, Henry A.

[idata]

Hello Emyshor,

Thank you for your update. I just will like to follow up and ask if you had time to run the test that I send you before. If there is anything else we can help please feel free to ask.Best regards, Henry A.

[Emanuel_A_Intel1]

Hi Henry,

Yes, I did tested, but still doesn't work. Like I've said above, I'll need new SSD.

It's working with SSD that are TCG-E compliant.

Thanks.

[idata]

Hello Emyshor,

I am sorry for the duplicate messages. You are right it could definably be the SSD. My question will be if the SSD was purchase from Intel or somewhere else. If it was purchased from Intel, then you could contact the SSD support or open a ticket with them. If there is anything else we can help please feel free to ask.Best regards, Henry A.

[idata]

Hello Emyshor,

I just will like to follow up on the problems to encrypt the SSD and is working for a possible compatibility. If there is anything else we can help please feel free to ask.Best regards, Henry A.

[idata]

Hello Emyshor,

I just will like to follow up on the problems to encrypt the SSD and is working for a possible compatibility. If there is anything else we can help please feel free to ask.Best regards, Henry A.

[Emanuel_A_Intel1]

Henry,

For now, there is nothing that you can help me. I need new SSD or do the software encryption.

Thanks.

[idata]

Hello Emyshor,

No problem at all. I hope you can get the SSD replace or maybe the next firmware upgrade might resolve the situation. If there is anything else we can help please don't hesitate to ask. Best regards, Henry A.