Setting up Storage or Volume Encryption on the new controller module

If the existing system used Storage or Volume Encryption, you must configure the new controller module for Storage or Volume Encryption, including installing and setting up the key managers, certificates, and servers.

About this task

These are the high-level steps for setting up Storage or Volume Encryption.

Steps

  1. Enable key management.

    Use one of the following procedures, depending on whether you are using onboard or external key management and your ONTAP version.

    ONTAP 9 NetApp Encryption Power Guide

    • "Enabling onboard key management in ONTAP 9.6 and later (NVE)"
    • "Enabling onboard key management in ONTAP 9.5 and earlier releases in the 9.x family (NVE)"
    • "Enabling external key management in ONTAP 9.6 and later (HW-based)"
    • "Enabling external key management in ONTAP 9.5 and earlier releases in the 9.x family (HW-based)"
  2. Restore Storage or Volume Encryption functionality by using the appropriate procedure in the NetApp Encryption Power Guide.

    ONTAP 9 NetApp Encryption Power Guide

    Use one of the following procedures, depending on whether you are using onboard or external key management:

    • "Restoring onboard key management encryption keys"
    • "Restoring external key management encryption keys"