Does ONTAP upgrade automatically change to enable AES encryption?
Applies to
- ONTAP 9
- CIFS/SMB Kerberos-based authentication
Answer
- ONTAP upgrades do not automatically enable AES encryption if it was disabled in the previous version.
- AES encryption settings are retained during the upgrade process, and any changes to enable or disable AES encryption must be performed manually.
- Starting with ONTAP 9.13, AES encryption (AES-128 and AES-256) is enabled by default for newly created CIFS servers.
Additional Information
additionalInformation_text
