Search

How to switch from NVE or NAE to NSE
https://kb.netapp.com/on-prem/ontap/DM/Encryption/Encryption-KBs/How_to_switch_from_NVE_or_NAE_to_NSE
Applies to NetApp Storage Encryption (NSE) NetApp Volume Encryption (NVE) NetApp Aggregate Encryption (NAE) Disable NVE and NAE by default (if required). Decrypt the volumes/aggregates (if required). ...Applies to NetApp Storage Encryption (NSE) NetApp Volume Encryption (NVE) NetApp Aggregate Encryption (NAE) Disable NVE and NAE by default (if required). Decrypt the volumes/aggregates (if required). If using NVE: Unencrypt the volumes with volume moves. If using NAE: Unencrypt the volumes in the aggregate and modify the aggregate with the -encrypt-with-aggr-key false flag. Can I use NetApp Storage Encryption (NSE) drives with NetApp Volume Encryption (NVE) and NetApp Aggregate Encryption (NAE)?
How to return SED to factory-configured settings after OKM data authentication key is lost
https://kb.netapp.com/on-prem/ontap/DM/Encryption/Encryption-KBs/How_to_return_SED_to_factory-configured_settings_after_OKM_data_authentication_key_is_lost
Sanitizing one or more self-encrypting disks (SEDs), renders the existing data on the SEDs impossible to retrieve. The only method to restore the encryption key is by having cluster passphrase and res...Sanitizing one or more self-encrypting disks (SEDs), renders the existing data on the SEDs impossible to retrieve. The only method to restore the encryption key is by having cluster passphrase and restoring the backup information of Onboard key Manager with output from This operation employs the inherent erase capability of SEDs to perform all of the following changes: Sets the data authentication key (AK) to the default manufacture secure ID (MSID).
sed gets permission denied after enabling NFS auditing
https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/sed__gets_permission_denied_after_enabling_NFS_auditing
Applies to ONTAP 9 Native ONTAP NFS auditing sed 4.2 Issue sed -i gets permission denied after enabling auditing of NFS events on the SVM [ntap@~ nfsaudit]$ echo "hello" > ntapfl ; sed -i 's/hello/OK/...Applies to ONTAP 9 Native ONTAP NFS auditing sed 4.2 Issue sed -i gets permission denied after enabling auditing of NFS events on the SVM [ntap@~ nfsaudit]$ echo "hello" > ntapfl ; sed -i 's/hello/OK/g' ntapfl sed: couldn't close ./sedxbZ0aw: Permission denied A TCPDUMP shows the storage denies sed write call with NFS4ERR_ACCESS vserver security file-directory shows the user has enough permission on the volume Other tools like vim or echo can write to the export volume
How to tell if I have NVMe SEDs installed
https://kb.netapp.com/on-prem/ontap/OHW/OHW-KBs/How_to_tell_if_I_have_NVMe_SEDs_installed
Applies to NetApp Storage Encryption (NSE) SED drives ONTAP 9 Description This article describes how to identify if NVMe drives that have not undergone FIPS testing (referred to as SED drives) are ins...Applies to NetApp Storage Encryption (NSE) SED drives ONTAP 9 Description This article describes how to identify if NVMe drives that have not undergone FIPS testing (referred to as SED drives) are installed in a FAS or AFF system.
Volume move with SEDs gives a warning
https://kb.netapp.com/on-prem/ontap/Ontap_OS/OS-KBs/Volume_move_with_SEDs_gives_a_warning
When a volume gets its storage from a single associated aggregate with non-SEDs and the volume moved to a single associated aggregate with SEDs, the following warning is displayed: Warning: You are ab...When a volume gets its storage from a single associated aggregate with non-SEDs and the volume moved to a single associated aggregate with SEDs, the following warning is displayed: Warning: You are about to move a volume to an aggregate that has disk level encryption from an aggregate that does not. When a volume gets its storage from a single associated aggregate with SEDs and the volume moved to a single associated aggregate with non-SEDs, the following warning is displayed: