AFF

Have trouble creating an encrypted volume or converting volumes

stefonsamaroo
198 Views

I have aFF a250 , i have an tier with one SVM and  a couple volumes , i set up  the keystore manager but i am unabled to create an encrypted volume. both in UI or Command line 

node::*> volume create -vserver <svm> -volume test4 -aggregate aggr1 -size 12GB -encrypt true

Error: command failed: Internal error. Use the "cluster show" command to verify
that all nodes are healthy. Wait a few minutes and try the operation
again.

node::*> volume create -vserver <svm> -volume test4 -aggregate aggr1 -size 12GB -encrypt false
[Job 1182] Job succeeded: Successful

i see no encryption related errors and my cluster and node shows up healthy 

2 REPLIES 2

TMACMD
181 Views

Have you run “cluster show”? Is the cluster healthy?

 What about “ security key-manager onboard show-backup”? 

you may want to try “security key-manager onboard sync” and enter the passphrase 

chenguanghui
138 Views

hello:

   For NVE, if you set , volumes you create with the and commands are automatically encrypted. For NVE (if it is set) cc-mode-enabled=yes, the volume will be automatically encrypted using the created volume create and volume move start commands. For volume create, there is no need to specify -encrypt true. I hope this article will help you.

https://docs.netapp.com/us-en/ontap/encryption-at-rest/enable-onboard-key-management-96-later-nve-task.html 

Best regards.

Public