ONTAP 9.5 and earlier
When upgrading ONTAP to a version higher than 9.6+, Volume Encryption Keys (VEKs) are observed. This was the result of a change in code where ONTAP stopped using "
key-manager setup" and instead used two new commands paths.
For Onboard Key Management:
::>security key-manager onboard enable
For External Key Management:
::>security key-manager external enable
You may also see VEKs not restored, this is also not an issue: