---
name: "nbft_security_flags"
section: "2"
platform: "linux"
package: "libnvme-dev"
version: "1.13-2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/nbft_security_flags"
---

# nbft\_security\_flags(2)

Security Profile Descriptor Flags (Figure 22)

## NAME

enum nbft\_security\_flags - Security Profile Descriptor Flags (Figure 22)

## SYNOPSIS

enum nbft\_security\_flags {\
     **NBFT\_SECURITY\_VALID** , \
\
     **NBFT\_SECURITY\_IN\_BAND\_AUTH\_MASK** , \
\
     **NBFT\_SECURITY\_IN\_BAND\_AUTH\_NOT\_SUPPORTED** , \
\
     **NBFT\_SECURITY\_IN\_BAND\_AUTH\_NOT\_REQUIRED** , \
\
     **NBFT\_SECURITY\_IN\_BAND\_AUTH\_REQUIRED** , \
\
     **NBFT\_SECURITY\_AUTH\_POLICY\_LIST\_MASK** , \
\
     **NBFT\_SECURITY\_AUTH\_POLICY\_LIST\_NOT\_SUPPORTED** , \
\
     **NBFT\_SECURITY\_AUTH\_POLICY\_LIST\_DRIVER** , \
\
     **NBFT\_SECURITY\_AUTH\_POLICY\_LIST\_ADMIN** , \
\
     **NBFT\_SECURITY\_SEC\_CHAN\_NEG\_MASK** , \
\
     **NBFT\_SECURITY\_SEC\_CHAN\_NEG\_NOT\_SUPPORTED** , \
\
     **NBFT\_SECURITY\_SEC\_CHAN\_NEG\_NOT\_REQUIRED** , \
\
     **NBFT\_SECURITY\_SEC\_CHAN\_NEG\_REQUIRED** , \
\
     **NBFT\_SECURITY\_SEC\_POLICY\_LIST\_MASK** , \
\
     **NBFT\_SECURITY\_SEC\_POLICY\_LIST\_NOT\_SUPPORTED** , \
\
     **NBFT\_SECURITY\_SEC\_POLICY\_LIST\_DRIVER** , \
\
     **NBFT\_SECURITY\_SEC\_POLICY\_LIST\_ADMIN** , \
\
     **NBFT\_SECURITY\_CIPHER\_RESTRICTED** , \
\
     **NBFT\_SECURITY\_AUTH\_DH\_GROUPS\_RESTRICTED** , \
\
     **NBFT\_SECURITY\_SEC\_HASH\_FUNC\_POLICY\_LIST**

};

## Constants

- NBFT\_SECURITY\_VALID

  Descriptor Valid: If set to 1h, then this descriptor is valid. If cleared to 0h, then this descriptor is not valid.

- NBFT\_SECURITY\_IN\_BAND\_AUTH\_MASK

  Mask to get the In-Band Authentication Required field.

- NBFT\_SECURITY\_IN\_BAND\_AUTH\_NOT\_SUPPORTED

  In-band authentication is not supported by the NVM subsystem.

- NBFT\_SECURITY\_IN\_BAND\_AUTH\_NOT\_REQUIRED

  In-band authentication is supported by the NVM subsystem and is not required.

- NBFT\_SECURITY\_IN\_BAND\_AUTH\_REQUIRED

  In-band authentication is supported by the NVM subsystem and is required.

- NBFT\_SECURITY\_AUTH\_POLICY\_LIST\_MASK

  Mask to get the Authentication Policy List flag: This field indicates whether authentication protocols were indicated by policy from driver defaults or administrative configuration.

- NBFT\_SECURITY\_AUTH\_POLICY\_LIST\_NOT\_SUPPORTED

  Authentication Protocols Heap Object Reference field Offset and Length are reserved.

- NBFT\_SECURITY\_AUTH\_POLICY\_LIST\_DRIVER

  Authentication Protocols Offset field and the Authentication Protocols Length field indicate a list of authentication protocols used by the driver.

- NBFT\_SECURITY\_AUTH\_POLICY\_LIST\_ADMIN

  Authentication Protocols Offset field and the Authentication Protocols Length field indicate a list of authentication protocols that were administratively set and used by the driver.

- NBFT\_SECURITY\_SEC\_CHAN\_NEG\_MASK

  Mask to get the Secure Channel Negotiation Required flag: This field indicates whether secure channel negotiation (e.g. TLS) is required.

- NBFT\_SECURITY\_SEC\_CHAN\_NEG\_NOT\_SUPPORTED

  Secure channel negotiation is not supported by the NVM subsystem.

- NBFT\_SECURITY\_SEC\_CHAN\_NEG\_NOT\_REQUIRED

  Secure channel negotiation is supported by the NVM subsystem and is not required.

- NBFT\_SECURITY\_SEC\_CHAN\_NEG\_REQUIRED

  Secure channel negotiation is supported by the NVM subsystem and is required.

- NBFT\_SECURITY\_SEC\_POLICY\_LIST\_MASK

  Mask to get the Security Policy List flag: This field indicates whether secure channel protocols were indicated by policy from driver defaults or administrative configuration.

- NBFT\_SECURITY\_SEC\_POLICY\_LIST\_NOT\_SUPPORTED

  The Offset field and Length field in the Secure Channel Algorithm Heap Object Reference field are reserved.

- NBFT\_SECURITY\_SEC\_POLICY\_LIST\_DRIVER

  The Heap Object specified by the Secure Channel Algorithm Heap Object Reference field indicates a list of authentication protocols used by the driver.

- NBFT\_SECURITY\_SEC\_POLICY\_LIST\_ADMIN

  The Heap Object specified by the Secure Channel Algorithm Heap Object Reference field indicates a list of authentication protocols that were administratively set and used by the driver.

- NBFT\_SECURITY\_CIPHER\_RESTRICTED

  Cipher Suites Restricted by Policy: If set to 1h, then the Cipher Suite Offset field and the Ciper Suite Length field indicate a list of supported cipher suites by the driver. If cleared to 0h, then the Cipher Suite Offset field and the Cipher Suite Length field are reserved.

- NBFT\_SECURITY\_AUTH\_DH\_GROUPS\_RESTRICTED

  Authentication DH Groups Restricted by Policy List: If set to 1h, then connections shall use one of the authentication DH groups in the Authentication DH Groups List is required. If cleared to 0h, then no Authentication DH Groups List is indicated and use of an authentication DH Group is not required.

- NBFT\_SECURITY\_SEC\_HASH\_FUNC\_POLICY\_LIST

  Secure Hash Functions Policy List: If set to 1h, then connections shall use one of the secure hash functions in the Secure Hash Functions Policy List is required. If cleared to 0h, then no Secure Hash Functions Policy List is indicated and use of a secure hash function is not required.