Skip to main content
Refer to the NetApp ONTAP documentation ( docs.netapp.com/us-en/ontap/encryption-at-rest/encrypt-volumes-concept.html) to understand and use the NVE capabilities, which include enabling:
  • Aggregate-level encryption (
docs.netapp.com/us-en/ontap/encryption-at-rest/enable-aggregate-level-encryption-nve-license-task.html)
  • Encryption on new volumes (
docs.netapp.com/us-en/ontap/encryption-at-rest/enable-encryption-new-volume-task.html)
  • Encryption on existing volumes (
docs.netapp.com/us-en/ontap/encryption-at-rest/encrypt-existing-volume-task.html)
  • Encryption on the SVM root volume (
docs.netapp.com/us-en/ontap/encryption-at-rest/configure-nve-svm-root-task.html)
  • Node root volume encryption (
docs.netapp.com/us-en/ontap/encryption-at-rest/enable-root-volume-encryption-task.html) For all of the preceding encryption operations, ONTAP communicates with the CryptoHub to create and use AES-256 keys through KMIP to encrypt and decrypt volume data as needed.