Enable RDL on the FlashArray

4min

After you enable RDL, disabling it destroys all data stored in the array.
Perform the following tasks to enable and test RDL:
1 | Enable RDL by using KMIP
The following purearray enable security-token command enables RDL by using the KMIP server.
Shell
pureuser@purefa-ct0:# purearray enable security-token --kmip kmip_srvr
pureuser@purefa-ct0:# purearray enable security-token --kmip kmip_srvr
﻿
You can list the new security-token with the following command:
Shell
pureuser@purefa-ct0:# purearray list --security-token
pureuser@purefa-ct0:# purearray list --security-token
﻿
2 | Test the security-token
The following purearray test security-token command tests the security-token with RDL enabled:
Allow up to 30 minutes for the purearray test command to accurately reflect the configuration.
Shell
pureuser@purefa-ct0:# purearray test security-token
pureuser@purefa-ct0:# purearray test security-token
﻿
The Status column reports success or failure:
OK: A TLS connection was established with the KMIP server, and a basic KMIP Locate request succeeded.
Fail: One of the following failures likely occurred:
Cannot connect and authenticate with the server. For example, the KMIP server URI is not reachable, or the certificate is not in the correct format, is not a complete certificate, or is not a certificate file.
Server is not ready for KMIP operations. For example, the KMIP server cannot authenticate the certificate, or the KMIP server cannot successfully respond to the Locate request.
﻿

Updated 11 Dec 2024

Did this page help you?

Configuring TLS mutual authentication between FlashArray and CryptoHub

Ongoing RDL operation