Are ONTAP storage efficiencies maintained when software-based encryption (NVE or NAE) is in use?
Applies to
- ONTAP 9
- NetApp Volume Encryption (NVE)
- NetApp Aggregate Encryption (NAE)
Answer
- Yes. As depicted in Figure 1 below, the Cryptographic Module performs data encryption at the RAID layer.
- This allows storage efficiencies to stay in place because they are performed before the encryption functions.
Figure 1) NVE and NAE encrypt/decrypt flow
Note: For aggregate-level deduplication, refer to Does NVE and NAE work with aggregate deduplication?
Additional Information
FAQ: NetApp Volume Encryption and NetApp Aggregate Encryption