Running this command will update the rekey speed for all devices on the VM. However, it requires a reboot to take effect.

1. Log into the Windows VM as an administrator.

2. Enter the following command: 

   hcl set_rekey_throttle [config] PendingIoCount PollInterval MaxWaitTime

   Where: 

   • config sets the default value for rekey throttle.

   • PendingIoCount—The background rekey task only runs if the number of pending I/O requests is less than this value. The default is 1, which means that Cryptographic Security Platform Vault will wait for the length of time specified in MaxWaitTime before it continues processing if there are any I/O requests on the server. If you want to remove all throttling, set this value to 0 (zero).

     We recommend that you only remove throttling if the server is not running any mission-critical applications or if you have four or more CPUs on your system. Even in these cases, we recommend that you monitor the disk performance during a rekey operation before you set this value to 0 in the default configuration.

   • PollInterval is the number of seconds to wait before Cryptographic Security Platform Vault polls the queue to see if there are any pending I/O requests. The default is 1 second.
   • MaxWaitTime is the maximum number of seconds to wait before Cryptographic Security Platform Vault rekeys one block of data even if the pending I/O count exceeds the value set in PendingIoCount. This ensures that the rekey task will complete eventually with minimal impact to the applications running on the server. The default is 60 seconds.

   These changes will take effect after the next server boot.