# Enable Device Security

Enable data-at-rest security for the persistent memory on one or more persistent memory modules by setting a passphrase. For better passphrase protection, specify an empty string (e.g., ConfirmPassphrase="") to be prompted for the passphrase or to use a file containing the passphrase with the source option.

```
$ ipmctl set [OPTIONS] -dimm [TARGETS] NewPassphrase=(string) ConfirmPassphrase=(string)
```

## **Targets**

* `-dimm (DimmIDs)`

  Set the passphrase on specific modules by supplying one or more comma separated DimmIDs. However, this is not recommended as it may put the system in an undesirable state. The default is to set the passphrase on all manageable modules.

## **Properties**

* `NewPassphrase`: The new passphrase (1-32 characters).
* `ConfirmPassphrase`: Confirmation of the new passphrase (1-32 character and must match NewPassphrase).

## **Examples**

Set a passphrase on DIMM 0x0001

```
$ ipmctl set -dimm 0x0001 NewPassphrase=123 ConfirmPassphrase=123
```

Set a passphrase on DIMM 0x0001 by supplying the passphrase in the file mypassphrase.file.

```
ipmctl set -source mypassphrase.file -dimm 0x0001 NewPassphrase="" ConfirmPassphrase=""
```

In the previous example, the format of the file would be:

```
#ascii
NewPassphrase=myNewPassphrase
```

## **Limitations**

In order to successfully execute this command:

* The caller must have the appropriate privileges. The specified module must have security disabled and be manageable by the host software.
* There must not be any goal creation pending.
* Command is subject to OS Vendor (OSV) support. If OSV does not provide support, command will return "Not Supported."


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.pmem.io/ipmctl-user-guide/v1.x/security/enable-device-security.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.