Encryption KBs
Encryption KBs
Featured
NetApp Encryption Overview
NetApp offers both software and hardware based encryption technologies
NetApp offers both software and hardware based encryption technologies
FAQ: NVE and NAE
Frequently asked questions about NetApp Volume and NetApp Aggregate Encryption
Frequently asked questions about NetApp Volume and NetApp Aggregate Encryption
What is NetApp Storage Encryption
Full disk encryption that protects data at rest with no operational impact
Full disk encryption that protects data at rest with no operational impact
Other Resources
- Why are two Key IDs generated in the same cluster after enabling OKM?Fri, 17 Jul 2026
- What SNMP trap is generated when cpuTooBusy is configured in ONTAP?Wed, 08 Jul 2026
- Why is the -cc-mode-enabled parameter not available in ONTAP 9.18.1?Thu, 02 Jul 2026
- KMIP server not responding while node boots after data center moveFri, 26 Jun 2026
- Node fails to boot due to an encrypted root volume - Key not restoredMon, 08 Jun 2026
- What type of encryption keys are used for Data Encryption Keys and Key Encrypting Keys in ONTAPMon, 01 Jun 2026
- Are there any impacts on existing data or network communication when enabling data encryption with NSE?Thu, 28 May 2026
- HA pair boot failure after power restoration due to Onboard Key Manager key unseal failureMon, 25 May 2026
- Node Timeout While Connecting to (KMIP) External Key ManagerThu, 21 May 2026
- ONTAP Call Home Alert: Authentication Key Check Failure with External Key ManagerMon, 11 May 2026
- Unable to configure encryption on volumeWed, 29 Apr 2026
- KMIP Destroy in ONTAP Does Not Purge Encryption Key Metadata in CipherTrust/EKMMon, 06 Apr 2026
- How to update existing KMIP SSL certificates from ONTAP boot menuWed, 01 Apr 2026
- What is the purpose of the arw.medium.encryption.percentage.threshold option in ONTAP 9.17.1？Fri, 27 Mar 2026
- Attempting to disable onboard key manager to delete disk encryption key failsFri, 13 Mar 2026
- How to enable OKM in ONTAP for non-MetroCluster environmentsFri, 06 Feb 2026
- Lun creation fails with "The Onboard Key Manager is already configured"Thu, 05 Feb 2026
- VEK keys got converted into AEK after ONTAP upgrade to 9.14.XFri, 30 Jan 2026
- Unable to configure data SVM key manager with NAE volumes in 9.16.1PxWed, 03 Dec 2025
- Understanding ARP protection on SAN and VMDK Workload VolumesFri, 21 Nov 2025
- Enable encryption on Load Sharing (LS) Mirror volumesTue, 21 Jul 2026
- OKM: How to recover from a lost Cluster passphrase in ONTAP 9.6 and later when using NAEMon, 20 Jul 2026
- Volume creation fails in GCP as VEKs cannot be created for data SVMFri, 17 Jul 2026
- ONTAP Call Home Alert: Authentication Key Check Failure with External Key ManagerFri, 17 Jul 2026
- What SNMP trap is generated when cpuTooBusy is configured in ONTAP?Fri, 17 Jul 2026
- Why are two Key IDs generated in the same cluster after enabling OKM?Fri, 17 Jul 2026
- What type of encryption keys are used for Data Encryption Keys and Key Encrypting Keys in ONTAPFri, 17 Jul 2026
- Which interface is external key manager communication using during boot?Thu, 09 Jul 2026
- How to return SED to factory-configured settings after OKM data authentication key is lostThu, 09 Jul 2026
- KMIP server not responding while node boots after data center moveWed, 08 Jul 2026
- How to protect FIPS or SED drives from authentication lock out while troubleshooting KMIP reachability issuesWed, 08 Jul 2026
- Why is the -cc-mode-enabled parameter not available in ONTAP 9.18.1?Thu, 02 Jul 2026
- KMIP server not responding while node boots due to network connectivity issuesThu, 02 Jul 2026
- How to verify if onboard key manager is configuredMon, 29 Jun 2026
- How to boot ONTAP from an external Key Management (KMIP) server using an ifgrp or vlanWed, 24 Jun 2026
- How to backup Onboard Key Manager (OKM)Wed, 24 Jun 2026
- When Onboard Key Manager (OKM) Common Criteria Mode is enabled a cluster-wide passphrase is required at system startupTue, 09 Jun 2026
- Node fails to boot due to an encrypted root volume - Key not restoredMon, 08 Jun 2026
- Understanding ARP protection on SAN and VMDK Workload VolumesThu, 04 Jun 2026
- Are there any impacts on existing data or network communication when enabling data encryption with NSE?Thu, 28 May 2026
Highest rated
(rating)- How to determine if the running ONTAP version supports Data At Rest Encryption
- How to determine FIPS 140-2 or 140-3 certification number for encrypting drives
- How does NVE and NAE encrypt data?
- Encrypted volumes offline because of manual giveback with override vetoes
- Error: Encryption is not enabled on the destination cluster
- How do I transition from the onboard key manager to an external key manager or conversely
- How to set pre-boot environment variables for NetApp Storage Encryption using KMIP servers
- External key servers unavailable on boot when using ifgrps with more than one digit in names as KMIP interfaces
- ONTAP 9 giveback operation was vetoed by keymanager
- The new client certificate public or private keys are different from the existing client certificate
- Can I instantaneously delete an NVE volume encryption key without deleting the volume?
- Nodes will not boot, error: Unable to restore data access on encrypting disk
- Can I do a volume move while an active NVE volume encryption start is running?
- How to remove Onboard Key Management (OKM) in Data ONTAP 9.6 and later when volumes are encrypted
- Giveback during ANDU is vetoed due to External Key Manager
Recently updated
(date updated)- Enable encryption on Load Sharing (LS) Mirror volumes
- OKM: How to recover from a lost Cluster passphrase in ONTAP 9.6 and later when using NAE
- Volume creation fails in GCP as VEKs cannot be created for data SVM
- ONTAP Call Home Alert: Authentication Key Check Failure with External Key Manager
- What SNMP trap is generated when cpuTooBusy is configured in ONTAP?
- Why are two Key IDs generated in the same cluster after enabling OKM?
- What type of encryption keys are used for Data Encryption Keys and Key Encrypting Keys in ONTAP
- Which interface is external key manager communication using during boot?
- How to return SED to factory-configured settings after OKM data authentication key is lost
- KMIP server not responding while node boots after data center move
- How to protect FIPS or SED drives from authentication lock out while troubleshooting KMIP reachability issues
- Why is the -cc-mode-enabled parameter not available in ONTAP 9.18.1?
- KMIP server not responding while node boots due to network connectivity issues
- How to verify if onboard key manager is configured
- How to boot ONTAP from an external Key Management (KMIP) server using an ifgrp or vlan
Recently added
(date created)- Why are two Key IDs generated in the same cluster after enabling OKM?
- What SNMP trap is generated when cpuTooBusy is configured in ONTAP?
- Why is the -cc-mode-enabled parameter not available in ONTAP 9.18.1?
- KMIP server not responding while node boots after data center move
- Node fails to boot due to an encrypted root volume - Key not restored
- What type of encryption keys are used for Data Encryption Keys and Key Encrypting Keys in ONTAP
- Are there any impacts on existing data or network communication when enabling data encryption with NSE?
- HA pair boot failure after power restoration due to Onboard Key Manager key unseal failure
- Node Timeout While Connecting to (KMIP) External Key Manager
- ONTAP Call Home Alert: Authentication Key Check Failure with External Key Manager
- Unable to configure encryption on volume
- KMIP Destroy in ONTAP Does Not Purge Encryption Key Metadata in CipherTrust/EKM
- How to update existing KMIP SSL certificates from ONTAP boot menu
- What is the purpose of the arw.medium.encryption.percentage.threshold option in ONTAP 9.17.1？
- Attempting to disable onboard key manager to delete disk encryption key fails