All new hardware platforms introduced with ONTAP 9.1 and later support NetApp Volume Encryption (NVE). ONTAP 9.6 and later support NetApp Aggregate Encryption (NAE) . NetApp Volume Encryption (NVE) an...All new hardware platforms introduced with ONTAP 9.1 and later support NetApp Volume Encryption (NVE). ONTAP 9.6 and later support NetApp Aggregate Encryption (NAE) . NetApp Volume Encryption (NVE) and NetApp Aggregate Encryption (NAE) require that the controller CPU provide an offload called AES-NI The NetApp Hardware Universe provides NetApp Volume Encryption support information per platform. FAQ: NetApp Volume Encryption and NetApp Aggregate Encryption
Customers can use any existing disk with NVE, which also includes NetApp Storage Encryption (NSE) drives for double or layered encryption. Allows ONTAP to encrypt data for each volume with the keys sh...Customers can use any existing disk with NVE, which also includes NetApp Storage Encryption (NSE) drives for double or layered encryption. Allows ONTAP to encrypt data for each volume with the keys shared for the aggregate. Note: NVE and NAE are the only options available for encrypting data in NetApp MetroCluster software and ONTAP Select. FAQ: NetApp Volume Encryption and NetApp Aggregate Encryption
Performs the data encryption operations and generates encryption keys for the volumes (see Figure 1). A unique XTS-AES-256 data encryption key is generated for each volume or aggregate for NVE and NAE...Performs the data encryption operations and generates encryption keys for the volumes (see Figure 1). A unique XTS-AES-256 data encryption key is generated for each volume or aggregate for NVE and NAE respectively. When using the onboard key manager (OKM), an encryption key hierarchy is used to encrypt and protect all volume or aggregate keys. NSE drives are FIPS 140-2 level 2 validated, and the CryptoMod used by NVE and NAE are FIPS 140-2 level 1 validated.
