Windows System and ES GuardPoint Administration

The voradmin command is a command line utility for management of CTE specific configuration and status reporting. The voradmin command also supports configuration management related to ES GuardPoints (ESG).

Windows supports the following voradmin esg commands.

voradmin esg list disk

Command: voradmin esg list disk

Lists the disks available on the Windows host. The Disk### column matches the disk numbers in the Windows Disk Manager. The Device Name column shows the name of the disk that you need to use with other voradmin commands. In the following example, the Device Name for Disk1 is \Device\00000036.

For example:

voradmin esg list disk
Disk###  Device Name                    Boot Disk  Size       Status     Partition  Read Only  SERIAL NUMBER
-------  ------------------------------ ---------  ---------  ---------  ---------  ---------  ---------------
Disk0    \Device\Ide\IdeDeviceP0T0L0-0  Yes        127.0 GB   Online     MBR        No         6000c29d241599...
Disk1    \Device\00000032               No         49.9 GB    Online     MBR        No         6000c29b1d5a4c...
Disk2    \Device\00000033               No         50.9 GB    Online     MBR        Yes        6000c290582227...
Disk3    \Device\00000034               No         50.9 GB    Online     MBR        No         6000c290fd627b...

voradmin esg config

Command: voradmin esg config [new|xform] <device-name>=<device-label>

Initializes a new or existing Windows device so that it can be protected as an ES GuardPoint through the CipherTrust Manager. For details on using this command, see Initialize New Windows Devices and Initialize and Resize Existing Windows Devices.

voradmin esg status

Command: voradmin esg status

Displays the status of the disks on the host. The Disk### column matches the disk numbers in the Windows Disk Manager. The Device Name column shows the name of the disk that you need to use with other voradmin commands. In the following example, the Device Name for Disk1 is \Device\00000032.

If the device has been initialized, the user-defined disk label appears in the ESG Device Label column. If the device has been protected with an ES GuardPoint through the CipherTrust Manager, the Guard Status column displays “guarded”. The Xform Status column displays the status of any data transformation processes run on the disk. NA means it was a new disk, so no data transformation was needed. For existing disks, the Xform Status can be Not Started, In Progress, or Completed.

For example:

voradmin esg status
Disk###  Device Name                        Boot Disk  ESG Device label          Guard Status   Xform Status
-------  ---------------------------------  ---------  ------------------------  -------------  -------------
Disk0    \Device\Ide\IdeDeviceP0T0L0-0      Yes        NA                        guarded
Disk1    \Device\00000032                   No         ExistWinDisk1             guarded        Completed
Disk2    \Device\00000033                   No         NewESDisk                 guarded        NA
Disk3    \Device\00000034                   No         ExistWinDisk2             guarded        Completed

voradmin esg status [xform] <device-label>

Displays the details of the device specified in <device-label>, where <device-label> is the ESG Device Label assigned to the device. If you use the optional xform paramater, the command displays the status of any data transformation processes running on the device.

For example:

voradmin esg status NewESDisk

Disk###                       Disk2
Device Name                   \Device\00000033
Serial Number
Boot Disk                     No
ESG Device label              NewESDisk
Guard Status                  Guarded
Xform Status                  NA
Key UUID                      cf242f18-de61-3f72-ba57-0b28a94a4f21

C:\> voradmin esg status xform NewESDisk

ESG Rekey/Xform Status
-----------------------

        Status        :NA
        Device Type   :New

Key Information:
        Key UUID      :cf242f18-de61-3f72-ba57-0b28a94a4f21
        KeyID         :48361
        KeyName       :ES-Key
        Old KeyID     :0
        Old KeyName   :clear_key

Block information:
        Transformed   :0
        Remaining     :0
        Total         :0

voradmin esg delete

Command: voradmin esg delete <disk-label>, where:

<disk-label> is the user-defined label that was specified when the device was initialized. To view a list of disk labels, use the voradmin esg status command.

Removes the ES Header from the specified device. The device cannot be protected as an ES GuardPoint or this command will fail.

For example:

voradmin esg delete NewESDisk
ES disk header deleted successfully.