What does enabling the Onboard Key Manager do?
Applies to
- ONTAP
- Onboard Key Manager (OKM)
Answer
- Enabling OKM setups the Onboard Key Manager
- With OKM enabled new volumes will be encrypted by default
- Enabling the OKM does not encrypt existing data
- For encrypting existing data manually encrypt the volumes or disks
- For creating unecrypted volumes while the OKM is enabled, manually create them unencrypted using the ONTAP CLI, or disable the default encryption