Skip to main content

Move a SnapLock volume

Contributors netapp-lenida netapp-thomi
PDFs

Beginning with ONTAP 9.8, you can move a SnapLock volume to a destination aggregate of the same type, either Enterprise to Enterprise, or Compliance to Compliance. You must be assigned the SnapLock security role to move a SnapLock volume.

Create a SnapLock security administrator account

You must have SnapLock security administrator privileges to perform a SnapLock volume move. This privilege is granted to you with the snaplock role, introduced in ONTAP 9.8. If you have not already been assigned that role, you can ask your cluster administrator to create a SnapLock security user with this SnapLock security role.

What you'll need

  • You must be a cluster administrator to perform this task.

  • You must have logged in on a secure connection (SSH, console, or ZAPI).

About this task

The snaplock role is associated with the admin SVM, unlike the vsadmin-snaplock role, which is associated with the data SVM.

Step

  1. Create an SVM administrator account with the SnapLock administrator role:

    security login create -vserver SVM_name -user-or-group-name user_or_group_name -application application -authmethod authentication_method -role role -comment comment

    The following command enables the SVM administrator account SnapLockAdmin with the predefined snaplock role to access admin SVM cluster1 using a password:

    cluster1::> security login create -vserver cluster1 -user-or-group-name SnapLockAdmin -application ssh -authmethod password -role snaplock

Move a SnapLock volume

You can use the volume move command to move a SnapLock volume to a destination aggregate.

What you'll need

  • You must have created a SnapLock-protected audit log before performing SnapLock volume move.

    Create an audit log.

  • If you are using a version of ONTAP earlier than ONTAP 9.10.1, the destination aggregate must be the same SnapLock type as the SnapLock volume you want to move; either Compliance to Compliance or Enterprise to Enterprise. Beginning with ONTAP 9.10.1, this restriction is removed and an aggregate can include both Compliance and Enterprise SnapLock volumes, as well as non-SnapLock volumes.

  • You must be a user with the SnapLock security role.

Steps

  1. Using a secure connection, log in to the ONTAP cluster management LIF:

    ssh snaplock_user@cluster_mgmt_ip

  2. Move a SnapLock volume:

    volume move start -vserver SVM_name -volume SnapLock_volume_name -destination-aggregate destination_aggregate_name

  3. Check the status of the volume move operation:

    volume move show -volume SnapLock_volume_name -vserver SVM_name -fields volume,phase,vserver