You can enable the file system lock when the DD-Encryption-enabled protection system and its external storage devices are being transported, or to lock a disk that is being replaced. This procedure requires two roles: security officer and system administration.

Follow this procedure to lock the file system:

1. Click Data Management > File System > DD Encryption. 
2. In the File System Lock area, click Lock. 

3. In the Lock File System window, enter the following and click OK.

• The username and password of a security officer account (an authorized user in the Security User group on that protection system)
• The current and a new passphrase

This procedure re-encrypts the encryption keys with the new passphrase. This process destroys the cached copy of the current passphrase (both in memory and on disk).

4. Shut down the system.
5. Transport the system or remove the disk being replaced.
6. Power on the system and use the following procedure to unlock the file system.

Follow this procedure to unlock the file system:

1. Select Data Management > File System > Encryption and click Unlock.
2. In the text fields, type the passphrase that was used to lock the file system.
3. Click OK, and then click Close to exit.

Note: If the passphrase is incorrect, the file system does not start, and the system reports the error. Enter the correct passphrase as directed in the previous step.