Do I need self-encrypting drives to use NSE
Applies to
- ONTAP 9
- NetApp Storage Encryption (NSE)
- Self-Encrypting Drives (SED)
- Federal Information Processing Standards (FIPS) Drives
Answer
- SEDs are necessary for hardware-based encryption
- These drives automatically encrypt data at rest using built-in encryption capabilities
- If the storage system does not have SEDs, the storage encryption disk show command will not list any disks because there are no drives with encryption capabilities to display
- To determine if your storage system has SEDs, you can use the following command:
::> storage disk show -fields encrypt
(This command will list all disks and their encryption status. If the
encrypt
field is false
for all disks, it indicates that none of the disks are SEDs)- Alternative Encryption Options: If upgrading to SEDs is not feasible, consider using software-based encryption options such as NVE or NAE, which do not require SEDs