topic Re: Aggr and Vol encryption both enabled in ONTAP Discussions

Aggr and Vol encryption both enabled

Baiju — Wed, 04 Jun 2025 10:12:42 GMT

Hi Gents,

I have Aggr encryption enabled and also used keyword -encrypt true while creating volumes on AFF. Having both enabled (aggr and vol encryption) has any adverse effect? also does this impact the cross volume deduplication savings? please advise.

Re: Aggr and Vol encryption both enabled

Ontapforrum — Mon, 27 Sep 2021 11:35:54 GMT

No. No, Data encryption happens at the RAID layer, which allows storage efficiencies to stay in place because they are performed before the encryption functions.

This Kb is very resourceful:
https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/FAQ%3A_NetApp_Volume_Encryption_and_NetApp_Aggregate_Encryption

Re: Aggr and Vol encryption both enabled

TMACMD — Mon, 27 Sep 2021 11:57:20 GMT

On an AFF, you must enable the aggregate encryption to use any of the cross volume efficiencies.

Re: Aggr and Vol encryption both enabled

TMACMD — Mon, 27 Sep 2021 14:25:21 GMT

Also, If I recall....if you have NAE (NetApp Aggregate Encryption enabled, any volume you create will automatically be encrypted (you do not need to use the -encrypt option)

Re: Aggr and Vol encryption both enabled

Fabian1993 — Mon, 27 Sep 2021 15:01:06 GMT

Does NVE and NAE work with aggregate deduplication?

You can put NVE volumes in aggregated deduplicated aggregates. The NVE volumes do not participate in the aggregate deduplication savings; the NVE volumes are ignored. NAE volumes do participate in aggregate deduplication savings.

Re: Aggr and Vol encryption both enabled

Baiju — Mon, 04 Oct 2021 05:41:58 GMT

I think I can use vol move command and convert NVE vol to NAE vol so that I can enable cross volume dedupe. Wondering any one has done a similar task and are there any risk involved (NetApp encryption power guide, page 39). i have got a A400 system with less than 5% CPU utilization now.

Re: Aggr and Vol encryption both enabled

Baiju — Mon, 04 Oct 2021 05:43:44 GMT

Hi TMAC,

I have NAE and on top of that I have NVE. I think I need to covert NAE vols to NAE vols to enable encryption right?

Re: Aggr and Vol encryption both enabled

Fabian1993 — Mon, 04 Oct 2021 06:07:47 GMT

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_convert_volumes_from_NetApp_Volume_Encryption_to_NetApp_Aggregate_Encryption

Look here, there is Guide to complete the whole Task,if you have all the things already done, you are fine 🙂