Skip to main content

Learn about configuring external key management with ONTAP

Contributors netapp-barbe netapp-aaron-holt netapp-ahibbard netapp-aherbin

You can use one or more external key management servers to secure the keys that the cluster uses to access encrypted data. An external key management server is a third-party system in your storage environment that serves keys to nodes using the Key Management Interoperability Protocol (KMIP).

NetApp Volume Encryption (NVE) supports Onboard Key Manager. Beginning with ONTAP 9.3, NVE supports external key management (KMIP) and Onboard Key Manager. Beginning with ONTAP 9.10.1, you can use Azure Key Vault or Google Cloud Key Manager Service to protect your NVE keys. Beginning with ONTAP 9.11.1, you can configure multiple external key managers in a cluster. See Configure clustered key servers.