Skip to main content

NetApp_Insight_2020.png 

NetApp Knowledgebase

How to enable NAE aggregate-level encryption with an SVM root volume or MDV_CRS volume(MCC)

Views:
624
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
core
Last Updated:

Applies to

  • ONTAP 9.6
  • NetApp Aggregate Encryption (NAE)
  • Metrocluster
  • SVM root volume
  • MDV_CRS volume

Description

  • When attempting to convert a Data aggregate to NAE. The SVM root or MDV_CRS  volume will not allow the conversion.

::*> aggr modify -aggregate 8040_05_aggr1 -encrypt-with-aggr-key true

Error: command failed: Failed to modify the aggregate "8040_05_aggr1" since it contains non-encrypted volumes.
Run the "volume show -encrypt  false" command to get the list of non-encrypted volumes.Convert all of them to NVE volumes and try again later.

  • Starting with ONTAP 9.6, you can use aggregate-level encryption to assign keys to the containing aggregate for the volumes to be encrypted. Volumes you create in the aggregate are encrypted by default. You can override the default when you encrypt the volume.
  • An aggregate enabled for aggregate-level encryption is called an NAE volume (for NetApp Aggregate Encryption). Plaintext volumes are not supported in NAE aggregates.

 

CUSTOMER EXCLUSIVE CONTENT

Registered NetApp customers get unlimited access to our dynamic Knowledge Base.

New authoritative content is published and updated each day by our team of experts.

Current Customer or Partner?

Sign In for unlimited access

New to NetApp?

Learn more about our award-winning Support