SnapLock is supported with NSE as of ONTAP 9. For compliance environments that require SnapLock, such as those required to meet SEC 17a-4, NetApp recommends that you work with your accreditation body to understand how to properly protect keys and prevent cryptoshredding of data. NetApp makes no assertion that NSE with SnapLock can meet accreditation, because this process is specific to each customer.
VGE doesnt support the usage of SnapLock yet but is on the roadmap for future realeases of ONTAP.
OKM (Onboard Key management) Internal key management and SnapLock are a supported config.