# Module `netapp_ontap.models.volume_encryption`

Copyright © 2023 NetApp Inc. All rights reserved.

This file has been automatically generated based on the ONTAP REST API documentation.

## Classes

`class VolumeEncryptionSchema (*, only: Union[Sequence[str], Set[str]] = None, exclude: Union[Sequence[str], Set[str]] = (), many: bool = False, context: Dict = None, load_only: Union[Sequence[str], Set[str]] = (), dump_only: Union[Sequence[str], Set[str]] = (), partial: Union[bool, Sequence[str], Set[str]] = False, unknown: str = None)`

  The fields of the VolumeEncryption object

  ### Ancestors

  - netapp_ontap.resource.ResourceSchema
  - marshmallow.schema.Schema
  - marshmallow.base.SchemaABC

  ### Class variables

  `action: str GET POST PATCH`

    This field can be used to pause an ongoing rekey or conversion operation or resume a paused rekey or conversion operation. Valid in PATCH. The following actions are supported for this field:
    conversion_pause ‐ Pause an encryption conversion operation currently in progress.
    conversion_resume ‐ Resume a paused encryption conversion operation.
    rekey_pause ‐ Pause an encryption rekey operation currently in progress.
    rekey_resume ‐ Resume a paused encryption rekey operation.

    Valid choices:

    - conversion_pause
    - conversion_resume
    - rekey_pause
    - rekey_resume
  `enabled: bool GET POST PATCH`

    Creates an encrypted or an unencrypted volume. For POST, when set to 'true', a new key is generated and used to encrypt the given volume. In that case, the underlying SVM must be configured with the key manager. When set to 'false', the volume created will be unencrypted. For PATCH, when set to 'true', it encrypts an unencrypted volume. Specifying the parameter as 'false' in a PATCH operation for an encrypted volume is only supported when moving the volume to another aggregate.

  `key_create_time: ImpreciseDateTime GET`

    Encryption key creation time of the volume.

    Example: 2022-01-01T19:00:00.000+0000

  `key_id: str GET`

    The key ID used for creating encrypted volume. A new key-id is generated for creating an encrypted volume. This key-id is associated with the generated key.

  `key_manager_attribute: str POST`

    Specifies an additional key manager attribute that is an identifier-value pair, separated by '='. For example, CRN=unique-value. This parameter is required when using the POST method and an IBM Key Lore key manager is configured on the SVM.

    Example: CRN=v1:bluemix:public:containers-kubernetes:us-south:a/asdfghjkl1234:asdfghjkl1234:worker:kubernetes-asdfghjkl-worker1

  `rekey: bool GET PATCH`

    If set to 'true', re-encrypts the volume with a new key. Valid in PATCH.

  `state: str GET`

    Volume encryption state.
    encrypted ‐ The volume is completely encrypted.
    encrypting ‐ Encryption operation is in progress.
    partial ‐ Some constituents are encrypted and some are not. Applicable only for FlexGroup volume.
    rekeying. Encryption of volume with a new key is in progress.
    unencrypted ‐ The volume is a plain-text one.

    Valid choices:

    - encrypted
    - encrypting
    - partial
    - rekeying
    - unencrypted
  `status: VolumeEncryptionStatus GET POST PATCH`

    The status field of the volume_encryption.

  `type: str GET`

    Volume encryption type.
    none ‐ The volume is a plain-text one.
    volume ‐ The volume is encrypted with NVE (NetApp Volume Encryption).
    aggregate ‐ The volume is encrypted with NAE (NetApp Aggregate Encryption).

    Valid choices:

    - none
    - volume
    - aggregate