Install Zettaset XCrypt Full Disk
The installer sends the Zettaset XCrypt Full Disk libraries and configuration files to each target node. It also encrypts the nodes and partitions listed in the hosts.inv file.
The Zettaset XCrypt Full Disk installer must be able to write to the PKCS #11 (FXPKCS11) log file (such as fxpkcs11.log) on the primary KMIP node. Before proceeding with the following steps, run the following command as root or sudo to add write permissions on the fxpkcs11.log file.
Perform a sanity check on the inventory file. This will confirm that the settings in your file are valid.
Run the installer:
This creates any KMIP and HSM servers needed, establishes secure connectivity between all nodes and services, and encrypts partitions. You should see zero failures for all nodes in the PLAY RECAP at the end of the install output.
Zettaset XCrypt Full Disk creates four keys on the : one public and one private RSA 2048 asymmetric key and two AES-256 Data Encryption keys.
View each target node's block devices to confirm partition encryption. Your output reflects your partitions.
View the encryption key names by viewing cryptinittab on the target node:
Back up the cryptinittab file for each encrypted node. This file is the only way to associate a key with a partition.
Review install.log when needed.
Remove the HSM PIN values from the hosts.inv file.