On our production Storage we have encryption enabled.
Then we apply the encryption only where required, so not for every volume and least of all SVM root volumes.
Hence, first problem:
if I try to define the root aggregate and name this fails
" "msg": "REST API currently does not support 'root_volume, root_volume_aggregate, root_volume_security_style'""
if I try to confine the SVM within a specific aggregate with aggr_list: aggr1 it creates the root volume wherever he wants
then if I try to move the root volume without encryption (encrypt: false) it fails
"Error moving volume svm11_fs_test_root: calling: storage/volumes/513cfae7-dd80-11ef-bb6c-d039eab57aa8: got {'message': 'The destination aggregate "xxxxxxx" does not have NAE (NetApp Aggregate Encryption) enabled. NAE volumes are not supported in such aggregates.', 'code': '196608312'}."
therefore I'm not able to create the SVM where I would like nor to change the root volume disabling its encryption
#na_ontap_svm and encryption - Unable to avoid svm root encryption
river stratus
winter cradle
@river stratus As the error says, root_volume, root_volume_aggregate, root_volume_security_style are not supported with REST.
Though it's possible to unencrypt volume through CLI there is no REST equivalent for option encrypt-destination.
Could you drop a query in #1063542514780475493 asking REST team if it's possible to create SVM with unencrypted root volume?
