volume module encryption type | NetApp | Page 1

short jay Apr 8, 2024, 5:39 PM

#

Hi everyone,

currently we are playing with ansible and want to use ansible more in production. For this I wanted to create a volume and noticed, that I don't have the possiblity to set the encryption type of the volume to be NAE. https://docs.ansible.com/ansible/latest/collections/netapp/ontap/na_ontap_volume_module.html

Creating the volume was successful but ONTAP shows, that the volume on a NAE Aggregate was created only with NVE. Interestingly creating the SVM and the root volume via the svm module creates the root volume with NAE. I don't know if this is just because we are on a old ONTAP Version (9.8P21, but we will update in a few month to a newer version). Thus, is there any possibility to set the encryption type while creating the volume or at least afterwards? Because the volume is now NVE my other task with setting cross volume dedup fails (thats why I noticed that the volume is NVE and not like the root volume NAE).

Thank you in advance for any help.

zinc mantle Apr 8, 2024, 8:02 PM

#

If a volume is being hosted on a NAE aggregate you dont need to specify an encryption type for the volume, as it will be encypted due to the nature of where it resides.

Read the four points at the start of this document: https://docs.netapp.com/us-en/ontap/encryption-at-rest/enable-encryption-new-volume-task.html

Enable encryption on a new volume

You can use the volume create command to enable encryption on a new volume.

short jay Apr 9, 2024, 6:54 AM

#

Hi Chris, I'm sorry that I missed this. Thank you very much for pointing me into the correct direction. I missed the point "In ONTAP 9.7 and later releases, if you add -encrypt true to the volume create command to create a volume in an NAE aggregate, the volume will have NVE encryption instead of NAE." Thus after removing the encryption value the volume now is NAE.

#volume module encryption type