set-dare-encryption
Enable data‑at‑rest encryption, or list the current configuration state.
When encryption is enabled, you are prompted for a passphrase between 8 and 64 characters, which is used to generate the encryption key. You must enter this passphrase at the console every time the FortiSandbox boots. Do not lose this passphrase, if you do, the FortiSandbox will not be able to boot and will become unusable.
- For VMs: you must restore a snapshot or reinstall.
- For hardware appliances: an RMA is required.
- This configuration currently encrypts only user configuration data and job data, including pending and finished jobs.
- DARE mode cannot be enabled while FortiSandbox is part of a cluster; however, the unit may join a cluster after DARE is enabled.
- DARE settings are not synchronized across cluster members.
- File sizes will increase by 8 KB to 12 KB after encryption.
- The only supported method to disable DARE is to run a CLI
factory-reset. -
This CLI is not available on virtual cloud and E models.
Syntax
set-dare-encryption [-h|-l|-e]
| Option | Description |
|---|---|
|
-h |
Help information. |
|
-l |
List data-at-rest encryption status. |
|
-e |
Enable data-at-rest encryption. |
Examples
Example:
FSASN> set-dare-encryption -h
Usage: set-dare-encryption [-h|-l|-e]
-h Help information
-l List data-at-rest encryption status
-e Enable data-at-rest encryption
FSASN >
FSASN > set-dare-encryption -l
Data-at-rest is not encrypted
FSASN >
Example:
FSASN > set-dare-encryption -e Data-at-rest encryption requires a passphrase. It will need to be entered at the Console each time the device is powered on. WARNING: Do not lose this passphrase as the device will not function correctly without entering the exact passphrase. Data is not recoverable without the passphrase. The system will be rebooted after entering the passphrase twice. Do you want to continue? (y/n)y Enter DARE passphrase: ******** Enter DARE passphrase: ******** Finished creating dare encryption for config data. FSASN > set-dare-encryption -l Data-at-rest encryption is active FSASN >