Mailing List Archive: Re:

First, enable a key manager
Then convert all data volumes to NVE
volume encrypt start ?.

After that, be sure any svm root volumes have been moved to the same aggregate.

Then convert the aggregates without the svm to NAE -> aggregate modify -aggregate xx -encrypt

Move the svm root
Vol move start -volume svmroot -dest aggr-nae -encrypt-with-aggr-key true

Encrypt the last aggregate

Now convert all the volumes to nae:
Vol move start -Vol xx -dest same-as-source -encrypt-with-aggr-key true

If you do not do the last step, you will not have full NAE. There is a kb about this as well

Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: Toasters <toasters-bounces@teaparty.net> on behalf of Iluhes via Toasters <toasters@teaparty.net>
Sent: Tuesday, March 8, 2022 11:20:29 PM
To: Toasters <toasters@teaparty.net>
Subject:

_______________________________________________
Toasters mailing list
Toasters@teaparty.net
https://www.teaparty.net/mailman/listinfo/toasters

Right.

For a volume to be moved into NAE, it needs be encrypted.
Ideally, for the dedupe to work, you need to "encrypt with the aggregate
key"

when you are moving the volume to NAE, you must specify ->
-encrypt-with-aggr-key
true
If the destination volume is NOT NAE, then it will not work.

If the volume is NVE, it still needs to be converted with the
"-encrypt-with-aggr-key
true " during a move.

--tmac

*Tim McCarthy, **Principal Consultant*

*Proud Member of the #NetAppATeam <https://twitter.com/NetAppATeam>*

On Fri, Mar 11, 2022 at 2:19 PM Iluhes <iluhes@yahoo.com> wrote:

> What is going with netapp and NAE encryption, none of the documenation
> make sense to me anymore.
> I see you should be able to move non ecrypted volume into NAE aggigate,
> but I cannot
> I get error, non-encrypted volumes are not supported in such aggegates
> All i want is to have NAE encryption, and volumes in the NAE aggr to be
> not encrypted so I can have aggr level dedup
> On Wednesday, March 9, 2022, 07:48:41 AM CST, Iluhes via Toasters <
> toasters@teaparty.net> wrote:
>
>
> Thanks, but before last step I will blow up space, right?
> At the moment that all volume are NVE I loose cross volume dedup and that
> what I cannot afford.
> How can I account how much space for any aggregate I will “loose” if there
> is no cross volume dedup
>
> On Mar 9, 2022, at 3:06 AM, Tim McCarthy <tmacmd@gmail.com> wrote:
>
> ?
>
> First, enable a key manager
> Then convert all data volumes to NVE
> volume encrypt start ….
>
> After that, be sure any svm root volumes have been moved to the same
> aggregate.
>
> Then convert the aggregates without the svm to NAE -> aggregate modify
> -aggregate xx -encrypt
>
> Move the svm root
> Vol move start -volume svmroot -dest aggr-nae -encrypt-with-aggr-key true
>
> Encrypt the last aggregate
>
> Now convert all the volumes to nae:
> Vol move start -Vol xx -dest same-as-source -encrypt-with-aggr-key true
>
> If you do not do the last step, you will not have full NAE. There is a kb
> about this as well
>
> Get Outlook for iOS <https://aka.ms/o0ukef>
> ------------------------------
> *From:* Toasters <toasters-bounces@teaparty.net> on behalf of Iluhes via
> Toasters <toasters@teaparty.net>
> *Sent:* Tuesday, March 8, 2022 11:20:29 PM
> *To:* Toasters <toasters@teaparty.net>
> *Subject:*
>
> _______________________________________________
> Toasters mailing list
> Toasters@teaparty.net
> https://www.teaparty.net/mailman/listinfo/toasters
> _______________________________________________
> Toasters mailing list
> Toasters@teaparty.net
> https://www.teaparty.net/mailman/listinfo/toasters
>