Skip to main content

Rotate authentication keys for ONTAP NetApp Storage Encryption

Contributors netapp-aaron-holt netapp-bhouser netapp-ahibbard netapp-aherbin
PDFs

You can rotate authentication keys when using NetApp Storage Encryption (NSE).

About this task

Rotating authentication keys in an NSE environment is supported if you are using External Key Manager (KMIP).

Note Rotating authentication keys in an NSE environment is not supported for Onboard Key Manager (OKM).
Steps

  1. Use the security key-manager create-key command to generate new authentication keys.

    You need to generate new authentication keys before you can change the authentication keys.

  2. Use the storage encryption disk modify -disk * -data-key-id command to change the authentication keys.

Related information