Aggr and Vol encryption both enabled

[Baiju]

Hi Gents,

I have Aggr encryption  enabled and also used keyword -encrypt true while creating volumes on AFF. Having both enabled (aggr and vol encryption) has any adverse effect? also does this impact the cross volume deduplication savings? please advise.

[Ontapforrum]

No.  No,  Data encryption happens at the RAID layer, which allows storage efficiencies to stay in place because they are performed before the encryption functions.

This Kb is very resourceful:
https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/FAQ%3A_NetApp_Volume_Encryption_and_NetApp_Aggregate_Encryption

[TMACMD]

On an AFF, you must enable the aggregate encryption to use any of the cross volume efficiencies. 

[Baiju]

Hi TMAC,

I have NAE and on top of that I have NVE. I think I need to covert NAE vols to NAE vols to enable encryption right?

[Fabian1993]

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_convert_volumes_from_NetApp_Volume_Encryption_to_NetApp_Aggrega...

Look here, there is Guide to complete the whole Task,if you have all the things already done, you are fine 🙂

[TMACMD]

Also, If I recall....if you have NAE (NetApp Aggregate Encryption enabled, any volume you create will automatically be encrypted (you do not need to use the -encrypt option)

[Fabian1993]

Does NVE and NAE work with aggregate deduplication?

You can put NVE volumes in aggregated deduplicated aggregates. The NVE volumes do not participate in the aggregate deduplication savings; the NVE volumes are ignored.  NAE volumes do participate in aggregate deduplication savings.

[Baiju]

I think I can use vol move command and convert NVE vol to NAE vol so that I can enable cross volume dedupe. Wondering any one has done a similar task and are there any risk involved (NetApp encryption power guide, page 39). i have got a A400 system with less than 5% CPU utilization now.