ONTAP Version 9.1P20

[Gabster29]

We are planning to upgrade from ONTAP version 8.3.2P12 to version 9.1P20 . When trying to download the image, we were presented with two options:

1- With NetApp Volume Encryption for FAS

2- Without NetApp Volume Encryption for FAS

Apparently, no matter which option we choose, the NVE will provide the ability to use the integrated OKM w/NVE to encrypt volumes.

What are the advantages of encrypting volumes?  It is really necessary?

[SpindleNinja]

What controller model do you have?   some won't support it even with the code update.   Check hwu.netapp.com for details. 

But generally you go with the Volume Encryption.  The NO Volume encryption is used for areas that can't use the encryption tech.  

NVE (NetApp Volume Encryption) is Software level data at rest encryption.   Here's some reading to start with - https://www.netapp.com/us/media/ds-3899.pdf 

[Gabster29]

FAS8040 is the controller model.

[SpindleNinja]

Cool,   So yes it's supported,  and I would get the image with encryption and keep using the encryption one each time you upgrade past 9.1,  even if you never use it. 

[paul_stejskal]

Encryption is just a feature available. You don't have to use it.

[Ashun]

If your data doesn't require the level of security encryption provides, it might not be strictly necessary.

NVE is an added layer of protection for your data, and whether it's necessary largely depends on your security needs.