Skip to main content
NetApp Knowledge Base

Why do I see VEKs after upgrading my cluster post 9.6?

  1. Last updated
  2. Save as PDF
Views:
65
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
core
Last Updated:

Applies to

ONTAP 9.5 and earlier

Answer

When upgrading ONTAP to a version higher than 9.6+, Volume Encryption Keys (VEKs) are observed. This was the result of a change in code where ONTAP stopped using "key-manager setup" and instead used two new commands paths.
 
For Onboard Key Management:
::>security key-manager onboard enable
 
For External Key Management:
::>security key-manager external enable
 

Additional Information

You may also see VEKs not restored, this is also not an issue:
One or more nodes have onboard key management VEK keys that need to be restored
 
NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.
Scan to view the article on your device