Volume encryption on root vols. | NetApp | Page 1

cyan merlin Feb 16, 2023, 10:34 PM

#

Is there a reason why we cannot do volume encryption on root vols of SVM's ?

If we cannot do it i think the System Manager interface where it displays encrypted volumes should exclude root vols from the list.

spark drum Feb 16, 2023, 10:58 PM

#

https://docs.netapp.com/us-en/ontap/encryption-at-rest/enable-root-volume-encryption-task.html

#

You can use NAE (NetApp aggregate encryption) to encrypt SVM root volumes.

cyan merlin Feb 17, 2023, 12:29 AM

#

thats node root volumes eg. Vol0 .. what about SVM root volumes ? or does that also cover them as well ?

stoic nebula Feb 17, 2023, 7:55 AM

#

As far as I know, SVM root volumes are only possible to encrypt with a volume move with "-encrypt-with-aggr-key true" to an NAE enabled aggregate.

spark drum Feb 17, 2023, 7:06 PM

#

cyan merlin thats node root volumes eg. Vol0 .. what about SVM root volumes ? or does that a...

As mentioned in the link:
"This procedure applies to the node root volume. It does not apply to SVM root volumes. SVM root volumes can be protected through aggregate-level encryption."

#Volume encryption on root vols.