Skip to main content

What's new in ONTAP 9.12.1

Contributors netapp-ahibbard netapp-dbagwell

Learn about the new capabilities available in ONTAP 9.12.1.

For details about earlier ONTAP 9 releases, hardware platform and switch support, known issues, and limitations, refer to the ONTAP 9 Release Notes. You must sign in with your NetApp account or create a NetApp account to access the ONTAP 9 Release Notes.

To upgrade ONTAP, see Prepare to upgrade ONTAP.

Data protection

Update Description

Support for larger FlexVol volumes with SnapMirror Synchronous

The maximum FlexVol volume size supported in SnapMirror Synchronous configurations has increased from 100 TB to 300 TB. Both the source and destination clusters must be running ONTAP 9.12.1P2 or later.

Support for larger file and LUN sizes in SnapMirror Synchronous

The maximum file and LUN size supported in SnapMirror Synchronous configurations has increased from 16 TB to 128 TB. Both the source and destination clusters must be running ONTAP 9.12.1 P2 or later.

Enhanced support for consistency groups

  • You can add and remove volumes from a consistency group, clone a consistency group (including from a Snapshot copy).

  • Consistency groups support application tagging to streamline data protection and management processes.

  • The ONTAP REST API supports configuring consistency groups with NFS/SMB volumes or NVMe namespaces.

SnapMirror Synchronous NDO

SnapMirror Synchronous supports non-disruptive operations (NDO) of HA takeover and giveback, volume move, and other maintenance-related operations. This feature is available only on AFF/ASA platforms.

ONTAP Mediator 1.5 supports SnapMirror Business Continuity

ONTAP Mediator 1.5 is available for monitoring SnapMirror Business Continuity (SM-BC) relationships.

SnapMirror Business (SM-BC) continuity enhancements

SM-BC supports partial LUN restore from Snapshots. Additionally, SM-BC extends QoS to volumes not in the SM-BC relationship.

Data warehouse rebuild indicator for SnapMirror asynchronous

SnapMirror asynchronous provides an indicator showing how long a data warehouse rebuild takes after a disaster recovery rehearsal by displaying the percentage complete.

SnapLock option to set minimum retention time "unspecified" absolute retention time

SnapLock includes an option to set a minimum retention time when the absolute retention time is set to "unspecified".

Tamperproof Snapshot copies

You can lock a Snapshot copy on a non-SnapLock volume to provide protection from ransomware attacks. Locking Snapshot copies helps ensure that they are not deleted accidentally or maliciously.

File access protocols

Update Description

Disable weak encryption types for Kerberos communication

A new SMB security option allows you to disable RC4 and DES in favor of Advanced Encryption Standard (AES) encryption types for Kerberos-based communication with the Active Directory (AD) KDC.

S3 client access to NAS data

S3 clients can access the same NAS data as NFS and SMB clients without reformatting, making it easier to serve S3 applications that require object data.

NFS extended attributes

NFS servers enabled for NFSv4.2 can store and retrieve NFS extended attributes (xattrs) from xattr-aware clients.

NFSv4.2 sparse files and space reservation support

The NFSv4.2 client is able to reserve space for a sparse file. Space can also be deallocated and unreserved from a file.

MetroCluster

Update Description

ONTAP Mediator 1.5 is supported in a MetroCluster IP configuration

ONTAP Mediator 1.5 is available for monitoring MetroCluster IP configurations.

IPsec support for front-end host protocol (such as NFS and iSCSI) is available in MetroCluster IP and MetroCluster fabric-attached configurations.

IPsec support for front-end host protocol (such as NFS and iSCSI) is available in MetroCluster IP and MetroCluster fabric-attached configurations.

MetroCluster automatic forced switchover feature in a MetroCluster IP configuration

You can enable the MetroCluster automatic forced switchover feature in a MetroCluster IP configuration. This feature is an extension of the Mediator-assisted unplanned switchover (MAUSO) feature.

S3 on an SVM on an unmirrored aggregate in a MetroCluster IP configuration

You can enable the MetroCluster automatic forced switchover feature in a MetroCluster IP configuration. This feature is an extension of the Mediator-assisted unplanned switchover (MAUSO) feature.

To learn about platform and switch configuration enhancements for MetroCluster configurations, see the ONTAP 9 Release Notes.

Networking

Update Description

LIF services

You can use the management-log-forwarding service to control which LIFs are used to forward audit logs to a remote syslog serve

S3 object storage

Update Description

Expanded support for S3 actions

The following Amazon S3 API actions are supported:

  • CopyObject

  • UploadPartCopy

  • BucketPolicy (GET, PUT, DELETE)

SAN

Update Description

Increased maximum LUN size for AFF and FAS platforms

Beginning with ONTAP 9.12.1P2, the maximum supported LUN size on AFF and FAS platforms increased from 16 TB to 128 TB.

Increased NVMe limits

The NVMe protocol supports the following:

  • 8K subsystems in a single storage VM and a single cluster

  • 12 node clusters NVMe/FC supports 256 controllers per port and NVMe/TCP supports 2K controllers per node.

NVME/TCP support for secure authentication

Secure, unidirectional and bidirectional authentication between an NVMe host and controller is supported over NVMe/TCP using the DHHMAC-CHAP authentication protocol.

MetroCluster IP support for NVMe

The NVMe/FC protocol is supported on 4-node MetroCluster IP configurations.

Security

In October 2022, NetApp implemented changes to reject AutoSupport message transmissions that are not sent by either HTTPS with TLSv1.2 or secure SMTP. For more information, see SU484: NetApp will reject AutoSupport messages transmitted with insufficient transport security.

Feature Description

Autonomous Ransomware Protection interoperability enhancements

Autonomous Ransomware Protection is available for these configurations:

  • Volumes protected with SnapMirror

  • SVMs protected with SnapMirror

  • SVMs enabled for migration (SVM data mobility)

Multifactor authentication (MFA) support for SSH with FIDO2 and PIV (both used by Yubikey)

SSH MFA can use hardware-assisted public/private key exchange with username and password. Yubikey is a physical token device that is plugged into the SSH client to increase MFA security.

Tamper-proof logging

All ONTAP internal logs are tamperproof by default, ensuring that compromised administrator accounts cannot hide malicious actions.

TLS transport for events

EMS events can be sent to a remote syslog server using the TLS protocol, thereby enhancing protection over the wire for central external audit logging.

Storage efficiency

Update Description

Temperature-sensitive storage efficiency

Temperature-sensitive storage efficiency is enabled by default on new AFF C250, AFF C400, AFF C800 platforms and volumes. TSSE is not enabled by default on existing volumes but can be enabled manually using the ONTAP CLI.

Increase in usable aggregate space

For All Flash FAS (AFF) and the FAS500f platforms, the WAFL reserve for aggregates greater than 30TB is reduced from 10% to 5%, resulting in increased usable space in the aggregate.

File System Analytics: Top directories by size

File System Analytics now identifies the directories in a volume that are consuming the most space.

Storage resource management enhancements

Update Description

FlexGroup rebalancing

You can enable automatic nondisruptive FlexGroup volume rebalancing to redistribute files between FlexGroup constituents.

Note It's recommended that you do not use automatic FlexGroup rebalancing after a FlexVol to FlexGroup conversion. Instead, you can use the disruptive retroactive file move feature available in ONTAP 9.10.1 and later, by entering the volume rebalance file-move command. For more information and command syntax, see the ONTAP Command Reference.

SnapLock for SnapVault support for FlexGroup volumes

SnapLock for SnapVault support for FlexGroup volumes

SVM management enhancements

Update Description

SVM data mobility enhancements

Cluster administrators can non-disruptively relocate an SVM from a source cluster to a destination cluster using FAS, AFF platforms, on hybrid aggregates. Support for both disruptive SMB protocol and Autonomous Ransomware Protection have been added.

System Manager

Beginning with ONTAP 9.12.1, System Manager is integrated with BlueXP. With BlueXP, administrators can manage the hybrid multicloud infrastructure from a single control plane while retaining the familiar System Manager dashboard. When signing into System Manager, administrators are given the option of accessing the System Manager interface in BlueXP or accessing System Manager directly. Learn more about System Manager integration with BlueXP.

Update Description

System Manager support for SnapLock

SnapLock operations, including Compliance Clock initialization, SnapLock volume creation, and WORM file mirroring are supported in System Manager.

Hardware visualization of cabling

System Manager users can view connectivity information about the cabling between hardware devices in their cluster to troubleshoot connectivity issues.

Support for multifactor authentication with Cisco DUO when logging in to System Manager

You can configure Cisco DUO as a SAML identity provider (IdP), enabling users to authenticate using Cisco DUO when they log in to System Manager.

System Manager networking enhancements

System Manager offers more control over the subnet and home port selection during network interface creation. System Manager also supports the configuration of NFS over RDMA connections.

System display themes

System Manager users can select a light or dark theme for the display of the System Manager interface. They can also choose to default to the theme used for their operating system or browser. This capability allows users to specify a setting that is more comfortable for reading the display.

Improvements to local tier capacity details

System Manager users can view capacity details for specific local tiers to determine if the space is over-committed, which might indicate that they need to add more capacity to ensure the local tier doesn't run out of space.

Improved searching

System Manager has an improved search capability that lets users search and access relevant and context-sensitive support information and System Manager product document from the NetApp Support Site directly through the System Manager interface. This allows users to acquire information they need to take appropriate action without having to search in various locations on the support site.

Volume provisioning improvements

Storage administrators can choose a Snapshot copy policy when creating a volume using System Manager rather than using the default policy.

Increase the size of a volume

Storage administrators can view the impact on data space and Snapshot copy reserve when they use System Manager to resize a volume.

Storage pool and Flash Pool management

Storage administrators can use System Manager to add SSDs to an SSD storage pool, create Flash Pool local tiers (aggregate) using SSD storage pool allocation units, and create Flash Pool local tiers using physical SSDs.

NFS over RDMA support in System Manager

System Manager supports network interface configurations for NFS over RDMA and identifies RoCE capable ports.