How many keys gets generated when an NAE aggregate is created
Applies to
ONTAP 9
NAE
Answer
NAE or Netapp Aggregate Encryption is a feature that supports aggregate encryption. Here we make use of an aggregate level key to encrypt an aggregate.
A volume created on NAE aggregate is by default encrypted using the aggregate level key and are called NAE volume.
20 keys are created per aggregate and these keys are used in round robin within the aggregate. These keys can be listed post NAE aggregate creation with below command,
::> storage aggregate encryption show-key-id
Additional Information
How do I see what AKs the KMIP servers have?
Use the security key-manager query
command to see the key IDs held by the servers. If the notation says that the keys are not restored, you should issue security key-manager restore
so that the keys are retrieved, for maximum drive availability.