Encryption KBs
Encryption KBs
Featured
NetApp Encryption Overview
NetApp offers both software and hardware based encryption technologies
NetApp offers both software and hardware based encryption technologies
FAQ: NVE and NAE
Frequently asked questions about NetApp Volume and NetApp Aggregate Encryption
Frequently asked questions about NetApp Volume and NetApp Aggregate Encryption
What is NetApp Storage Encryption
Full disk encryption that protects data at rest with no operational impact
Full disk encryption that protects data at rest with no operational impact
Other Resources
- ONTAP nodes show security unknown key (0xe) on boot after power outageMon, 14 Sep 2026
- When a new self-signed certificate is created on ONTAP cluster management SVM, is it automatically applied as the HTTPS certificate?Fri, 04 Sep 2026
- CipherTrust Key Manager is not responding within 10 minutes causing orphan keysThu, 03 Sep 2026
- Are ONTAP 9 releases affected by CVE-2026-59995 OpenSSH vulnerabilitiesWed, 02 Sep 2026
- Newly added FAS9000 nodes fail OKM syncWed, 02 Sep 2026
- Is it possible to unify volume encryption keys across all volumes for aggregate-level deduplication in ONTAP?Wed, 19 Aug 2026
- Node removal fails with self-encrypting drive authentication key error in ONTAP MetroClusterTue, 11 Aug 2026
- Why are two Key IDs generated in the same cluster after enabling OKM?Fri, 17 Jul 2026
- What SNMP trap is generated when cpuTooBusy is configured in ONTAP?Wed, 08 Jul 2026
- Why is the -cc-mode-enabled parameter not available in ONTAP 9.18.1?Thu, 02 Jul 2026
- KMIP server not responding while node boots after data center moveFri, 26 Jun 2026
- System Manager fails with NET::ERR_CERT_COMMON_NAME_INVALID in Chrome/Edge when the ONTAP certificate has no Subject Alternative Name (SAN)Fri, 26 Jun 2026
- Node fails to boot due to an encrypted root volume - Key not restoredMon, 08 Jun 2026
- What type of encryption keys are used for Data Encryption Keys and Key Encrypting Keys in ONTAPMon, 01 Jun 2026
- Are there any impacts on existing data or network communication when enabling data encryption with NSE?Thu, 28 May 2026
- HA pair boot failure after power restoration due to Onboard Key Manager key unseal failureMon, 25 May 2026
- Node Timeout While Connecting to (KMIP) External Key ManagerThu, 21 May 2026
- ONTAP Call Home Alert: Authentication Key Check Failure with External Key ManagerMon, 11 May 2026
- Unable to configure encryption on volumeWed, 29 Apr 2026
- Node down and will not boot:Unable to restore keys after power outageMon, 27 Apr 2026
- How to remove then reapply existing SED authentication keysWed, 28 Oct 2026
- System Manager fails with NET::ERR_CERT_COMMON_NAME_INVALID in Chrome/Edge when the ONTAP certificate has no Subject Alternative Name (SAN)Wed, 28 Oct 2026
- How to determine FIPS 140-2 or 140-3 certification number for encrypting drivesTue, 27 Oct 2026
- Node down and will not boot:Unable to restore keys after power outageMon, 19 Oct 2026
- Can an existing volume be encrypted with NVEThu, 15 Oct 2026
- How to restore onboard key manager server configuration from the ONTAP boot menuFri, 25 Sep 2026
- ONTAP nodes show security unknown key (0xe) on boot after power outageSat, 19 Sep 2026
- CipherTrust Key Manager is not responding within 10 minutes causing orphan keysWed, 09 Sep 2026
- Newly added FAS9000 nodes fail OKM syncTue, 08 Sep 2026
- When a new self-signed certificate is created on ONTAP cluster management SVM, is it automatically applied as the HTTPS certificate?Fri, 04 Sep 2026
- Are ONTAP 9 releases affected by CVE-2026-59995 OpenSSH vulnerabilitiesWed, 02 Sep 2026
- Key restore with EKM fails with No Cryptographic Object foundFri, 28 Aug 2026
- How to replace an encrypting drive that has a lost authentication keyMon, 24 Aug 2026
- Is it possible to unify volume encryption keys across all volumes for aggregate-level deduplication in ONTAP?Wed, 19 Aug 2026
- Error message of "mgmtgwd.certificate.expired" in event logThu, 13 Aug 2026
- How to return SED to factory-configured settings after OKM data authentication key is lostWed, 12 Aug 2026
- How to remove Onboard Key Management (OKM) in Data ONTAP 9.6 and later when volumes are encryptedWed, 12 Aug 2026
- Node removal fails with self-encrypting drive authentication key error in ONTAP MetroClusterWed, 12 Aug 2026
- Error while importing the keys from external key serverWed, 05 Aug 2026
- VEK key remains cached on node after NVE is deleted and removed from external key serverWed, 05 Aug 2026
Highest rated
(rating)- Error message of "mgmtgwd.certificate.expired" in event log
- Can I instantaneously delete an NVE volume encryption key without deleting the volume?
- How to rotate data authentication keys on a FIPS drive or SED
- Does NetApp Volume Encryption have to be enabled on both source and destination volumes of a SnapMirror relationship?
- Can deleted files be non-disruptively purged from NVE volumes?
- How do I realize aggregate deduplication space savings after moving NVE volumes to NAE volumes?
- Digital Certificate Expiring\Expired in Active IQ Unified Manager
- Can I do a volume move while an active NVE volume encryption start is running?
- The new client certificate public or private keys are different from the existing client certificate
- Error: Encryption is not enabled on the destination cluster
- Giveback during ANDU is vetoed due to External Key Manager
- External key servers unavailable on boot when using ifgrps with more than one digit in names as KMIP interfaces
- How do I transition from the onboard key manager to an external key manager or conversely
- Restore onboard key management encryption keys
- NVE: Encrypted volumes go offline after reboot in ONTAP 9.5 and earlier
Recently updated
(date updated)- How to remove then reapply existing SED authentication keys
- System Manager fails with NET::ERR_CERT_COMMON_NAME_INVALID in Chrome/Edge when the ONTAP certificate has no Subject Alternative Name (SAN)
- How to determine FIPS 140-2 or 140-3 certification number for encrypting drives
- Node down and will not boot:Unable to restore keys after power outage
- Can an existing volume be encrypted with NVE
- How to restore onboard key manager server configuration from the ONTAP boot menu
- ONTAP nodes show security unknown key (0xe) on boot after power outage
- CipherTrust Key Manager is not responding within 10 minutes causing orphan keys
- Newly added FAS9000 nodes fail OKM sync
- When a new self-signed certificate is created on ONTAP cluster management SVM, is it automatically applied as the HTTPS certificate?
- Are ONTAP 9 releases affected by CVE-2026-59995 OpenSSH vulnerabilities
- Key restore with EKM fails with No Cryptographic Object found
- How to replace an encrypting drive that has a lost authentication key
- Is it possible to unify volume encryption keys across all volumes for aggregate-level deduplication in ONTAP?
- Error message of "mgmtgwd.certificate.expired" in event log
Recently added
(date created)- ONTAP nodes show security unknown key (0xe) on boot after power outage
- When a new self-signed certificate is created on ONTAP cluster management SVM, is it automatically applied as the HTTPS certificate?
- CipherTrust Key Manager is not responding within 10 minutes causing orphan keys
- Are ONTAP 9 releases affected by CVE-2026-59995 OpenSSH vulnerabilities
- Newly added FAS9000 nodes fail OKM sync
- Is it possible to unify volume encryption keys across all volumes for aggregate-level deduplication in ONTAP?
- Node removal fails with self-encrypting drive authentication key error in ONTAP MetroCluster
- Why are two Key IDs generated in the same cluster after enabling OKM?
- What SNMP trap is generated when cpuTooBusy is configured in ONTAP?
- Why is the -cc-mode-enabled parameter not available in ONTAP 9.18.1?
- KMIP server not responding while node boots after data center move
- System Manager fails with NET::ERR_CERT_COMMON_NAME_INVALID in Chrome/Edge when the ONTAP certificate has no Subject Alternative Name (SAN)
- Node fails to boot due to an encrypted root volume - Key not restored
- What type of encryption keys are used for Data Encryption Keys and Key Encrypting Keys in ONTAP
- Are there any impacts on existing data or network communication when enabling data encryption with NSE?