Best Practices

Backup copies of the disk encryption keys should not be made onto an encrypted pack. If the original disk encryption key is corrupted or destroyed, you cannot recover the disk encryption keys as they are encrypted. Also, if the password used to export the keys is lost, the keys cannot be recovered. In order to encrypt the halt/load pack, keys must be backed-up to a CD. This is to ensure that the system can be started from a cold or warm start and that LOADER can read the CD to get the disk encryption keys.