ONTAP Discussions

Volume Encryption - Known issues or caveats

darraghos
1,814 Views
Guys looking at implementation volume encryption to satisfy data at rest encryption requirements. Using C-Mode 9.3. Wondering if any horror stores from the field or gotchas before we implement! Using Gemalto key store.
3 REPLIES 3

SpindleNinja
1,805 Views

Are you planning to use the onboard key manager or external? 

darraghos
1,786 Views
External with a product provided by Gemalto.

SpindleNinja
1,768 Views

I totally missed that while reading your post yesterday, sorry about that!  

 

Not really any "gotchas"  that I can think of with 9.3.   But there are some out there in general,  for example.  upgrading ONTAP 9.1 to 9.3 they had users decrypt the their disks during an upgrade.    

 

I would also test connection to the external key mangers during boot up too before you actually encrypt the disks.  

 

And review the power guide before you start doing it.  https://library.netapp.com/ecm/ecm_download_file/ECMLP2572742 

Public