If you run into bottleneck issues during a rekey operation on a Windows VM, you can pause the rekey operation and resume it at a later time.

Pausing and Resuming the Rekey Operation using the Policy Agent GUI

1. Log into the Windows system using an account with Administrator privileges.
2. Select Start > All Programs > Entrust > Entrust DataControl or start Windows PowerShell and enter the hclGUI command.
3. Right-click on the disk that you want to pause and select Pause.
4. When the status update window appears, click OK.
5. Refresh the window to confirm that the operation was paused.
6. Right-click on the disk that you paused and select Resume.
7. When the status update window appears, click OK.
8. Refresh the window to confirm that the operation was resumed.

Pausing the Rekey Operation using the CLI

1. Log into the VM as a System Administrator and open a Command Prompt or start Windows PowerShell.

2. Enter the command hcl rekey pause diskname, where diskname is the drive letter or folder mount of the Windows disk whose rekey operation you want to pause.

   Note: This command pauses the rekey operation but the CLI does not display a confirmation message.

3. To verify that the rekey operation has been paused, enter the hcl status command.

   Example:
   

   C:\Users\Administrator> hcl rekey pause g:
   C:\Users\Administrator> hcl status
   Summary
   -------------------------------------------------------------------------------
   KeyControl: 10.238.66.232:443
   KeyControl list: 10.238.66.232:443
   Status: Connected
   Last heartbeat: Fri May 19 14:08:40 2017 (successful)
   AES_NI: enabled
   Certificate Expiration: Sep 11 22:16:13 2020 GMT
   
   
   Device details
   -------------------------------------------------------------------------------
   Drive   Disk Part Cipher      Status    GUID
   -------------------------------------------------------------------------------
   C:      0    2    AES-XTS-512 Attached  3CBE4043-390C-49D6-BA81-CA225ED991C8
   E:      1    1    AES-XTS-512 Detached  8652CAC7-F991-43B0-A092-693628AC1633
   G:      2    1    AES-XTS-512 PS 28.28% FD19E39B-01F7-4E60-9354-76F6BABA0F31
   C:\Users\Administrator>
   

   In the above example, you can see that the status for G: is PS, which means Paused, and that the operation was 28.8% complete.

4. To resume the rekey operation, enter the command d hcl rekey resume diskname, where diskname is the drive letter or folder mount of the Windows disk whose rekey operation you want to resume.

5. To verify that the rekey operation has resumed, enter the hcl status command.

   Example:
   

   C:\Users\Administrator> hcl rekey resume g:
   C:\Users\Administrator> hcl status
   Summary
   -------------------------------------------------------------------------------
   KeyControl: 10.238.66.232:443
   KeyControl list: 10.238.66.232:443
   Status: Connected
   Last heartbeat: Fri May 19 14:21:45 2017 (successful)
   AES_NI: enabled
   Certificate Expiration: Sep 11 22:16:13 2020 GMT
   
   
   Device details
   -------------------------------------------------------------------------------
   Drive   Disk Part Cipher      Status    GUID
   -------------------------------------------------------------------------------
   C:      0    2    AES-XTS-512 Attached  3CBE4043-390C-49D6-BA81-CA225ED991C8
   E:      1    1    AES-XTS-512 Detached  8652CAC7-F991-43B0-A092-693628AC1633
   G:      2    1    AES-XTS-512 RK 35.10% FD19E39B-01F7-4E60-9354-76F6BABA0F31
   C:\Users\Administrator>

   In the above example, you can see that the status for G: is RK, which means Rekey, and that the operation is 35.10% complete.