topic Re: Have trouble creating an encrypted volume or converting volumes in AFF

Have trouble creating an encrypted volume or converting volumes

stefonsamaroo — Wed, 19 Mar 2025 19:41:38 GMT

I have aFF a250 , i have an tier with one SVM and a couple volumes , i set up the keystore manager but i am unabled to create an encrypted volume. both in UI or Command line

node::*> volume create -vserver <svm> -volume test4 -aggregate aggr1 -size 12GB -encrypt true

Error: command failed: Internal error. Use the "cluster show" command to verify
that all nodes are healthy. Wait a few minutes and try the operation
again.

node::*> volume create -vserver <svm> -volume test4 -aggregate aggr1 -size 12GB -encrypt false
[Job 1182] Job succeeded: Successful

i see no encryption related errors and my cluster and node shows up healthy

Re: Have trouble creating an encrypted volume or converting volumes

TMACMD — Wed, 19 Mar 2025 21:27:07 GMT

Have you run “cluster show”? Is the cluster healthy?

What about “ security key-manager onboard show-backup”?

you may want to try “security key-manager onboard sync” and enter the passphrase

Re: Have trouble creating an encrypted volume or converting volumes

chenguanghui — Thu, 20 Mar 2025 07:50:51 GMT

hello:

For NVE, if you set , volumes you create with the and commands are automatically encrypted. For NVE (if it is set) cc-mode-enabled=yes, the volume will be automatically encrypted using the created volume create and volume move start commands. For volume create, there is no need to specify -encrypt true. I hope this article will help you.

https://docs.netapp.com/us-en/ontap/encryption-at-rest/enable-onboard-key-management-96-later-nve-task.html

Best regards.