How can I enable NVE by default for newly created volumes?
Applies to
- ONTAP 9
- NetApp Volume Encryption (NVE)
- NetApp Aggregate Encryption (NAE)
Answer
- Starting with ONTAP 9.7, NAE and NVE are enabled by default if the following conditions are met:
- A Volume Encryption license is in place
- OKM or external key managers are configured
- NSE is not used
Note: NAE volumes are created by default on NAE aggregates, and NVE volumes are created by default on non-NAE aggregates.
- NVE and NAE can be disabled by default with the following command:
cluster1::*> options -option-name encryption.data_at_rest_encryption.disable_by_default on
Additional Information
FAQ: NetApp Volume Encryption and NetApp Aggregate Encryption