ONTAP Discussions

Aggr and Vol encryption both enabled

Baiju

Hi Gents,

 

I have Aggr encryption  enabled and also used keyword -encrypt true while creating volumes on AFF. Having both enabled (aggr and vol encryption) has any adverse effect? also does this impact the cross volume deduplication savings? please advise.

 

7 REPLIES 7

Ontapforrum

No.  No,  Data encryption happens at the RAID layer, which allows storage efficiencies to stay in place because they are performed before the encryption functions.

 

This Kb is very resourceful:
https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/FAQ%3A_NetApp_Volume_Encryption_and_NetApp_Aggregate_Encryption

TMACMD

On an AFF, you must enable the aggregate encryption to use any of the cross volume efficiencies. 

Baiju

Hi TMAC,

 

I have NAE and on top of that I have NVE. I think I need to covert NAE vols to NAE vols to enable encryption right?

 

 

Fabian1993

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_convert_volumes_from_NetApp_Volume_Encryption_to_NetApp_Aggrega...

 

Look here, there is Guide to complete the whole Task,if you have all the things already done, you are fine 🙂

TMACMD

Also, If I recall....if you have NAE (NetApp Aggregate Encryption enabled, any volume you create will automatically be encrypted (you do not need to use the -encrypt option)

Fabian1993

Does NVE and NAE work with aggregate deduplication?

You can put NVE volumes in aggregated deduplicated aggregates. The NVE volumes do not participate in the aggregate deduplication savings; the NVE volumes are ignored.  NAE volumes do participate in aggregate deduplication savings.

 

 

Baiju

I think I can use vol move command and convert NVE vol to NAE vol so that I can enable cross volume dedupe. Wondering any one has done a similar task and are there any risk involved (NetApp encryption power guide, page 39). i have got a A400 system with less than 5% CPU utilization now.

 

 

Public