Disable encryption by default with ONTAP 9.7 and later


Beginning with ONTAP 9.7, aggregate and volume encryption is enabled by default if you have a volume encryption (VE) license and use an onboard or external key manager. You can disable encryption by default if required.

What you’ll need

You must be a cluster administrator to perform this task, or an SVM administrator to whom the cluster administrator has delegated authority.

  1. To disable encryption by default in ONTAP 9.7 or later, run the following command:

    options -option-name encryption.data_at_rest_encryption.disable_by_default -vserver (vservername or * for all) -option-value on

    For complete command syntax, see the man page for the command.