Skip to main content

Snapshot locking

Contributors netapp-aaron-holt netapp-dbagwell netapp-aherbin
PDFs

Snapshot locking is a SnapLock capability where snapshots are rendered indelible manually or automatically with a retention period on the volume snapshot policy. The purpose of snapshot locking is to prevent rogue or untrusted administrators from deleting snapshots on primary or secondary ONTAP system.

Snapshot locking was introduced in ONTAP 9.12.1. Snapshot locking is also referred to as tamper-proof snapshot locking. Although it does require the SnapLock license and initialization of the compliance clock, snapshot locking is unrelated to SnapLock Compliance or SnapLock Enterprise. There is no trusted storage administrator, as with SnapLock Enterprise and it does not protect the underlying physical storage infrastructure, as with SnapLock Compliance. This is an improvement over SnapVaulting snapshots to a secondary system. Rapid recovery of locked snapshots on primary systems can be achieved to restore volumes corrupted by ransomware.

For more details, see the snapshot locking documentation.