Skip to main content

Manage ONTAP ARP/AI automatic enablement during upgrades

Contributors netapp-dbagwell
PDFs

When upgrading to ONTAP 9.18.1 or later, Autonomous Ransomware Protection with AI (ARP/AI) is automatically enabled by default on all new volumes for AFF A-series, AFF C-series, ASA, and ASA r2 systems after a 12-hour grace period, provided an anti-ransomware license is installed. Use this procedure to opt out of automatic default enablement during or after the grace period, or to change the setting at any time after the upgrade.

Note If you are running ONTAP 9.15.1 or earlier, see Learn about Autonomous Ransomware Protection.
Note If you are running ONTAP 9.17.1 or earlier, automatic cluster-level default enablement does not apply. You can configure SVM-level default enablement using Enable ARP/AI by default in new volumes.
Note Existing volumes must be manually enabled for ARP/AI.
Note Beginning with ONTAP 9.19.1, default ARP/AI enablement applies to clusters that include SnapMirror synchronous and SnapMirror active sync SAN relationships. In ONTAP 9.18.1, default enablement was suppressed for these configurations. For cross-cluster SnapMirror synchronous relationships, default enablement activates after both the source and destination clusters are upgraded to ONTAP 9.19.1.
About this task

The setting you choose can be changed later. After the grace period, you always have the flexibility to turn automatic default enablement on or off at any time:

security anti-ransomware auto-enable modify -new-volume-auto-enable false|true
Steps

You can use System Manager or the ONTAP CLI to manage ARP/AI automatic default enablement.

System Manager

  1. Select Cluster > Settings.

  2. Do one of the following:

    • Disable during active grace period:

      1. In the Anti-ransomware section, you'll see a message indicating the hours remaining before ARP/AI will be enabled. Select Don't enable.

      2. Select Disable in the next dialog box to confirm that default ARP/AI enablement is turned off for new volumes.

    • Disable after grace period:

      1. In the Anti-ransomware section, select Edit icon.

      2. Select the checkbox and then Save to disable automatic default ARP/AI enablement for new volumes.

CLI

  1. Check the automatic enablement status:

    security anti-ransomware auto-enable show

  2. Disable automatic default enablement for new volumes:

    security anti-ransomware auto-enable modify -new-volume-auto-enable false
Related information