topic Re: Volume Encryption - Known issues or caveats in ONTAP Discussions

Volume Encryption - Known issues or caveats

darraghos — Wed, 04 Jun 2025 13:14:20 GMT

Guys looking at implementation volume encryption to satisfy data at rest encryption requirements. Using C-Mode 9.3. Wondering if any horror stores from the field or gotchas before we implement! Using Gemalto key store.

Re: Volume Encryption - Known issues or caveats

SpindleNinja — Mon, 08 Oct 2018 15:52:17 GMT

Are you planning to use the onboard key manager or external?

Re: Volume Encryption - Known issues or caveats

darraghos — Mon, 08 Oct 2018 19:39:39 GMT

External with a product provided by Gemalto.

Re: Volume Encryption - Known issues or caveats

SpindleNinja — Tue, 09 Oct 2018 12:39:57 GMT

I totally missed that while reading your post yesterday, sorry about that!

Not really any "gotchas" that I can think of with 9.3. But there are some out there in general, for example. upgrading ONTAP 9.1 to 9.3 they had users decrypt the their disks during an upgrade.

I would also test connection to the external key mangers during boot up too before you actually encrypt the disks.

And review the power guide before you start doing it. https://library.netapp.com/ecm/ecm_download_file/ECMLP2572742