Skip to main content
NetApp Knowledge Base

How can I enable NVE by default for newly created volumes?

Last Updated:

Applies to

  • ONTAP 9
  • NetApp Volume Encryption (NVE)
  • NetApp Aggregate Encryption (NAE)


  • Starting with ONTAP 9.7, NAE and NVE are enabled by default if the following conditions are met:
    • A Volume Encryption license is in place
    • OKM or external key managers are configured
    • NSE is not used

Note: NAE volumes are created by default on NAE aggregates, and NVE volumes are created by default on non-NAE aggregates.

  • NVE and NAE can be disabled by default with the following command:

cluster1::*> options -option-name encryption.data_at_rest_encryption.disable_by_default on


NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.