Skip to main content

Securely purge data on an encrypted volume overview

Contributors netapp-ahibbard netapp-aaron-holt netapp-thomi netapp-aherbin
PDFs

Beginning with ONTAP 9.4, you can use secure purge to non-disruptively scrub data on NVE-enabled volumes. Scrubbing data on an encrypted volume ensures that it cannot be recovered from the physical media, for example, in cases of “spillage,” where data traces may have been left behind when blocks were overwritten, or for securely deleting a vacating tenant's data.

Secure purge works only for previously deleted files on NVE-enabled volumes. You cannot scrub an unencrypted volume. You must use KMIP servers to serve keys, not the onboard key manager.

Considerations for using secure purge

  • Volumes created in an aggregate enabled for NetApp Aggregate Encryption (NAE) do not support secure purge.

  • Secure purge works only for previously deleted files on NVE-enabled volumes.

  • You cannot scrub an unencrypted volume.

  • You must use KMIP servers to serve keys, not the onboard key manager.

Secure purge functions differently depending upon your version of ONTAP.

ONTAP 9.8 and later

  • Secure purge is supported by MetroCluster and FlexGroup.

  • If the volume being purged is the source of a SnapMirror relationship, you do not have to break the SnapMirror relationship to perform a secure purge.

  • The re-encryption method is different for volumes using SnapMirror data protection versus volumes not using SnapMirror data protection (DP) or those using SnapMirror extended data protection..

    • By default, volumes using SnapMirror data protection (DP) mode re-encrypt data using the volume move re-encryption method.

    • By default, volumes not using SnapMirror data protection or volumes using SnapMirror extended data protection (XDP) mode use the in-place re-encryption method.

    • These defaults can be changed using the secure purge re-encryption-method [volume-move|in-place-rekey] command.

  • By default, all snapshots in FlexVol volumes are automatically deleted during the secure purge operation. By default, Snapshots in FlexGroup volumes and volumes using SnapMirror data protection are not automatically deleted during the secure purge operation. These defaults can be changed using the secure purge delete-all-snapshots [true|false] command.