Skip to main content
NetApp Knowledge Base

How do I unencrypt an NAE volume?

Views:
1,333
Visibility:
Public
Votes:
3
Category:
ontap-9
Specialty:
core
Last Updated:

Applies to

  • ONTAP 9
  • NetApp Volume Encryption (NVE)
  • NetApp Aggregate Encryption (NAE)

Answer

  • Perform one of the following steps:
  1. Use another aggregate:
    1. Move the volumes to another non-NAE aggregate and convert them to plain text volumes. To do this, you would use the volume move commands with the parameter -encrypt-destination false -encrypt-with-aggr-key false.
  2. Use the same aggregate:
    • Assuming you have space in the existing NAE aggregate, move the volumes to convert them from NAE to NVE (which NAE aggregates do allow) in the same aggregate. To do this, use the volume move command with the parameter -encrypt-with-aggr-key false.
    • After all the volumes are all NVE and no NAE encrypted volumes exist, run the command to disable NAE on the aggregate aggregate modify -aggregate aggregate_name -node node_name -encrypt-with-aggr-key false.  Make sure that no aggregate Snapshot copies exist, or it will fail.
    • Move the NVE volumes to unencrypt them and convert from NVE to plain text with -encrypt-destination false.
  • See the following if unencrypting a SVM root or MDV CRS volume:

How to disable NAE aggregate-level encryption with an SVM root volume and MDV_CRS volume

 

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.