Disable encryption by default with ONTAP 9.7 and later
Beginning with ONTAP 9.7, aggregate and volume encryption is enabled by default if you have a volume encryption (VE) license and use an onboard or external key manager. You can disable encryption by default if required.
You must be a cluster administrator to perform this task, or an SVM administrator to whom the cluster administrator has delegated authority.
To disable encryption by default in ONTAP 9.7 or later, run the following command:
options -option-name encryption.data_at_rest_encryption.disable_by_default -vserver (vservername or * for all) -option-value on
For complete command syntax, see the man page for the command.