Skip to main content

Exciting new changes are coming to the Knowledge Base site soon!
Starting April 4, 2023, you will notice Support-Specific categorization and improvements to the search filters on the site. In May, we will be launching a new and enhanced Site UI and Navigation. To know more, read our Knowledge Article.

NetApp Knowledge Base

How do I unencrypt an NAE volume?

  1. Last updated
  2. Save as PDF
Views:
658
Visibility:
Public
Votes:
2
Category:
ontap-9
Specialty:
core
Last Updated:

Applies to

  • ONTAP 9
  • NetApp Volume Encryption (NVE)
  • NetApp Aggregate Encryption (NAE)

Answer

Perform one of the following steps:

  1. Use another aggregate:
    1. Move the volumes to another non-NAE aggregate and convert them to plain text volumes. To do this, you would use the volume move commands with the parameter -encrypt-destination false -encrypt-with-aggr-key false.
  2. Use the same aggregate:
    1. Assuming you have space in the existing NAE aggregate, move the volumes to convert them from NAE to NVE (which NAE aggregates do allow) in the same aggregate. To do this, use the volume move command with the parameter -encrypt-with-aggr-key false.
    2. After all the volumes are all NVE and no NAE encrypted volumes exist, run the command to disable NAE on the aggregate aggregate modify -aggregate aggregate_name -node node_name -encrypt-with-aggr-key false.  Make sure that no aggregate Snapshot copies exist, or it will fail.
    3. Move the NVE volumes to unencrypt them and convert from NVE to plain text with -encrypt-destination false.

Additional Information

 

Scan to view the article on your device