Volume Encryption - Known issues or caveats

[darraghos]

Guys looking at implementation volume encryption to satisfy data at rest encryption requirements. Using C-Mode 9.3. Wondering if any horror stores from the field or gotchas before we implement! Using Gemalto key store.

[SpindleNinja]

Are you planning to use the onboard key manager or external? 

[darraghos]

External with a product provided by Gemalto.

[SpindleNinja]

I totally missed that while reading your post yesterday, sorry about that!  

Not really any "gotchas"  that I can think of with 9.3.   But there are some out there in general,  for example.  upgrading ONTAP 9.1 to 9.3 they had users decrypt the their disks during an upgrade.    

I would also test connection to the external key mangers during boot up too before you actually encrypt the disks.  

And review the power guide before you start doing it.  https://library.netapp.com/ecm/ecm_download_file/ECMLP2572742