https://community.netapp.com/t5/ONTAP-Discussions/Aggregate-encryption-with-S3-bucket-volumes/m-p/439223#M41362 <P>Hello. I'm planning to enable NAE on my aggregates, but I have one which is keeping Flex Group volumes for Fabric Pool S3 bucket. Can such volumes be encrypted? Should I use normal procedure? I mean - encrypt them with NVE and then move them within the aggregate with '-encrypt-with-aggr-key true ' argument?</P> Wed, 04 Jun 2025 09:56:24 GMT kombayn 2025-06-04T09:56:24Z https://community.netapp.com/t5/ONTAP-Discussions/Aggregate-encryption-with-S3-bucket-volumes/m-p/439223#M41362 <P>Hello. I'm planning to enable NAE on my aggregates, but I have one which is keeping Flex Group volumes for Fabric Pool S3 bucket. Can such volumes be encrypted? Should I use normal procedure? I mean - encrypt them with NVE and then move them within the aggregate with '-encrypt-with-aggr-key true ' argument?</P> Wed, 04 Jun 2025 09:56:24 GMT https://community.netapp.com/t5/ONTAP-Discussions/Aggregate-encryption-with-S3-bucket-volumes/m-p/439223#M41362 kombayn 2025-06-04T09:56:24Z https://community.netapp.com/t5/ONTAP-Discussions/Aggregate-encryption-with-S3-bucket-volumes/m-p/439238#M41364 <P>According to the following documents, Yes.&nbsp; I think you can first - Enable NAE on the aggregates (containing existing FGs) &amp; then use 'vol move start' to move them.</P><P>&nbsp;</P><P>Can volume encryption be enabled on FlexGroup?<BR /><A href="https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Can_volume_encryption_be_enabled_on_FlexGroup#:~:text=ONTAP%209%20Answer%20Yes.%20You%20can%20encrypt%20FlexGroup,volumes%20by%20volume%20moving%20the%20FlexGroup%20members%20using%3A" target="_blank">https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Can_volume_encryption_be_enabled_on_FlexGroup#:~:text=ONTAP%209%20Answer%20Yes.%20You%20can%20encrypt%20FlexGroup,volumes%20by%20volume%20moving%20the%20FlexGroup%20members%20using%3A</A></P><P>&nbsp;</P><P>Enable encryption on an existing volume with the volume move start command<BR /><A href="https://docs.netapp.com/us-en/ontap/encryption-at-rest/encrypt-existing-volume-task.html" target="_blank">https://docs.netapp.com/us-en/ontap/encryption-at-rest/encrypt-existing-volume-task.html</A></P><P><BR />Note: ONTAP 9.6 added NetApp Aggregate Encryption (NAE), which allows you to encrypt at the aggregate level. FlexGroup volumes can use NAE, provided all aggregates that contain member volumes belonging to the same FlexGroup volume are encrypted.</P><P>&nbsp;</P><P>&nbsp;</P><P>Are NetApp SnapLock software and NetApp ONTAP FlexGroup volumes compatible with NVE and NAE?<BR /><A href="https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Are_NetApp_SnapLock_software_and_NetApp_ONTAP_FlexGroup_volumes_compatible_with_NVE_and_NAE#:~:text=NetApp%20ONTAP%20FlexGroup%20NetApp%20Volume%20Encryption%20%28NVE%29%20NetApp,volumes%20can%20be%20encrypted%20with%20a%20volume%20move" target="_blank">https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Are_NetApp_SnapLock_software_and_NetApp_ONTAP_FlexGroup_volumes_compatible_with_NVE_and_NAE#:~:text=NetApp%20ONTAP%20FlexGroup%20NetApp%20Volume%20Encryption%20%28NVE%29%20NetApp,volumes%20can%20be%20encrypted%20with%20a%20volume%20move</A>.</P><P>&nbsp;</P><P>What are the restrictions with FlexGroup volumes and NAE?<BR /><A href="https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/What_are_the_restrictions_with_FlexGroup_volumes_and_NAE" target="_blank">https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/What_are_the_restrictions_with_FlexGroup_volumes_and_NAE</A></P><P>&nbsp;</P> Thu, 20 Oct 2022 16:21:32 GMT https://community.netapp.com/t5/ONTAP-Discussions/Aggregate-encryption-with-S3-bucket-volumes/m-p/439238#M41364 Ontapforrum 2022-10-20T16:21:32Z