Encryption KBs
Encryption KBs
Featured
NetApp Encryption Overview
NetApp offers both software and hardware based encryption technologies
NetApp offers both software and hardware based encryption technologies
FAQ: NVE and NAE
Frequently asked questions about NetApp Volume and NetApp Aggregate Encryption
Frequently asked questions about NetApp Volume and NetApp Aggregate Encryption
What is NetApp Storage Encryption
Full disk encryption that protects data at rest with no operational impact
Full disk encryption that protects data at rest with no operational impact
Other Resources
- ONTAP nodes show security unknown key (0xe) on boot after power outageMon, 14 Sep 2026
- When a new self-signed certificate is created on ONTAP cluster management SVM, is it automatically applied as the HTTPS certificate?Fri, 04 Sep 2026
- CipherTrust Key Manager is not responding within 10 minutes causing orphan keysThu, 03 Sep 2026
- Is ONTAP 9 releases affected by CVE-2026-59995 OpenSSH vulnerabilitiesWed, 02 Sep 2026
- Newly added FAS9000 nodes fail OKM syncWed, 02 Sep 2026
- Is it possible to unify volume encryption keys across all volumes for aggregate-level deduplication in ONTAP?Wed, 19 Aug 2026
- Node removal fails with self-encrypting drive authentication key error in ONTAP MetroClusterTue, 11 Aug 2026
- Why are two Key IDs generated in the same cluster after enabling OKM?Fri, 17 Jul 2026
- What SNMP trap is generated when cpuTooBusy is configured in ONTAP?Wed, 08 Jul 2026
- Why is the -cc-mode-enabled parameter not available in ONTAP 9.18.1?Thu, 02 Jul 2026
- KMIP server not responding while node boots after data center moveFri, 26 Jun 2026
- Node fails to boot due to an encrypted root volume - Key not restoredMon, 08 Jun 2026
- What type of encryption keys are used for Data Encryption Keys and Key Encrypting Keys in ONTAPMon, 01 Jun 2026
- Are there any impacts on existing data or network communication when enabling data encryption with NSE?Thu, 28 May 2026
- HA pair boot failure after power restoration due to Onboard Key Manager key unseal failureMon, 25 May 2026
- Node Timeout While Connecting to (KMIP) External Key ManagerThu, 21 May 2026
- ONTAP Call Home Alert: Authentication Key Check Failure with External Key ManagerMon, 11 May 2026
- Unable to configure encryption on volumeWed, 29 Apr 2026
- KMIP Destroy in ONTAP Does Not Purge Encryption Key Metadata in CipherTrust/EKMMon, 06 Apr 2026
- How to update existing KMIP SSL certificates from ONTAP boot menuWed, 01 Apr 2026
- ONTAP nodes show security unknown key (0xe) on boot after power outageSat, 19 Sep 2026
- CipherTrust Key Manager is not responding within 10 minutes causing orphan keysWed, 09 Sep 2026
- Newly added FAS9000 nodes fail OKM syncTue, 08 Sep 2026
- When a new self-signed certificate is created on ONTAP cluster management SVM, is it automatically applied as the HTTPS certificate?Fri, 04 Sep 2026
- Is ONTAP 9 releases affected by CVE-2026-59995 OpenSSH vulnerabilitiesWed, 02 Sep 2026
- Key restore with EKM fails with No Cryptographic Object foundFri, 28 Aug 2026
- How to replace an encrypting drive that has a lost authentication keyMon, 24 Aug 2026
- Is it possible to unify volume encryption keys across all volumes for aggregate-level deduplication in ONTAP?Wed, 19 Aug 2026
- Error message of "mgmtgwd.certificate.expired" in event logThu, 13 Aug 2026
- How to return SED to factory-configured settings after OKM data authentication key is lostWed, 12 Aug 2026
- How to remove Onboard Key Management (OKM) in Data ONTAP 9.6 and later when volumes are encryptedWed, 12 Aug 2026
- Node removal fails with self-encrypting drive authentication key error in ONTAP MetroClusterWed, 12 Aug 2026
- Error while importing the keys from external key serverWed, 05 Aug 2026
- VEK key remains cached on node after NVE is deleted and removed from external key serverWed, 05 Aug 2026
- How to verify if onboard key manager is configuredThu, 30 Jul 2026
- How to recover from a lost passphrase while using onboard encryption and NVE within ONTAPFri, 24 Jul 2026
- Does the SAN ARP entropy evaluation period apply to NAS volumes including VM datastores ?Fri, 24 Jul 2026
- What is the performance impact of NVE and NAE?Thu, 23 Jul 2026
- How to replace SSL certificates on cluster with external key manager configuredWed, 22 Jul 2026
- Enable encryption on Load Sharing (LS) Mirror volumesTue, 21 Jul 2026
Highest rated
(rating)- ONTAP Truststore certificate BaltimoreCyberTrustRoot expiring May 2025
- How to determine FIPS 140-2 or 140-3 certification number for encrypting drives
- How to set pre-boot environment variables for NetApp Storage Encryption using KMIP servers
- How to renew or recreate an ONTAP self-signed SSL certificate with the NetApp PowerShell Toolkit
- Permission Denied when retrieving keys due to SKLM certificate change
- How do I transition from the onboard key manager to an external key manager or conversely
- Volume move fails while trying to move to or from an NAE aggregate
- ARL controller upgrade failed due to unavailability of volume encryption keys
- Can a paused volume encryption conversion job be cancelled?
- Does NetApp Volume Encryption have to be enabled on both source and destination volumes of a SnapMirror relationship?
- Can deleted files be non-disruptively purged from NVE volumes?
- How do I realize aggregate deduplication space savings after moving NVE volumes to NAE volumes?
- When Onboard Key Manager (OKM) Common Criteria Mode is enabled a cluster-wide passphrase is required at system startup
- Digital Certificate Expiring\Expired in Active IQ Unified Manager
- How to rotate data authentication keys on a FIPS drive or SED
Recently updated
(date updated)- ONTAP nodes show security unknown key (0xe) on boot after power outage
- CipherTrust Key Manager is not responding within 10 minutes causing orphan keys
- Newly added FAS9000 nodes fail OKM sync
- When a new self-signed certificate is created on ONTAP cluster management SVM, is it automatically applied as the HTTPS certificate?
- Is ONTAP 9 releases affected by CVE-2026-59995 OpenSSH vulnerabilities
- Key restore with EKM fails with No Cryptographic Object found
- How to replace an encrypting drive that has a lost authentication key
- Is it possible to unify volume encryption keys across all volumes for aggregate-level deduplication in ONTAP?
- Error message of "mgmtgwd.certificate.expired" in event log
- How to return SED to factory-configured settings after OKM data authentication key is lost
- How to remove Onboard Key Management (OKM) in Data ONTAP 9.6 and later when volumes are encrypted
- Node removal fails with self-encrypting drive authentication key error in ONTAP MetroCluster
- Error while importing the keys from external key server
- VEK key remains cached on node after NVE is deleted and removed from external key server
- How to verify if onboard key manager is configured
Recently added
(date created)- ONTAP nodes show security unknown key (0xe) on boot after power outage
- When a new self-signed certificate is created on ONTAP cluster management SVM, is it automatically applied as the HTTPS certificate?
- CipherTrust Key Manager is not responding within 10 minutes causing orphan keys
- Is ONTAP 9 releases affected by CVE-2026-59995 OpenSSH vulnerabilities
- Newly added FAS9000 nodes fail OKM sync
- Is it possible to unify volume encryption keys across all volumes for aggregate-level deduplication in ONTAP?
- Node removal fails with self-encrypting drive authentication key error in ONTAP MetroCluster
- Why are two Key IDs generated in the same cluster after enabling OKM?
- What SNMP trap is generated when cpuTooBusy is configured in ONTAP?
- Why is the -cc-mode-enabled parameter not available in ONTAP 9.18.1?
- KMIP server not responding while node boots after data center move
- Node fails to boot due to an encrypted root volume - Key not restored
- What type of encryption keys are used for Data Encryption Keys and Key Encrypting Keys in ONTAP
- Are there any impacts on existing data or network communication when enabling data encryption with NSE?
- HA pair boot failure after power restoration due to Onboard Key Manager key unseal failure