When Cryptographic Security Platform Vault rekeys a disk, it creates a new key and then begins decrypting the disk using the old key. As each block is decrypted, the Policy Agent re-encrypts it using the new key.

The following procedure applies to Windows disks only.

Tip: Depending on the size of the encrypted disk, the rekey process can take a long time to run. If the rekey process is interrupted on Windows, it will be resumed automatically when the disk comes back online.

Procedure 

1. Log into the Windows system using an account with Administrator privileges.
2. Select Start > All Programs > Entrust > Entrust DataControl or start Windows PowerShell and enter the hclGUI command.
3. Right-click on the disk that you want to rekey and select Rekey.
4. Click Yes on the confirmation screen.