Skip to main content
Create at least one encrypted dataset for the TrueNAS and CryptoHub integration in this final stage, enabling TrueNAS to start using KMIP. Datasets exist inside storage pools, so you must create one if a storage pool does not already exist. Refer to the following article on the TrueNAS Documentation Hub for setting up a storage pool: https://www.truenas.com/docs/core/gettingstarted/storingdata/

​
Encrypt a new dataset

You can encrypt new datasets within an existing unencrypted storage pool without encrypting the entire pool. To encrypt a single dataset, complete the following steps:
1
Go toStorage > Pools, select the three vertical dots on the far right side of the menu for an existing dataset, and select [ Add Dataset ].
2
In the Encryption Options area, deselect Inherit and select Encryption.
3
Choose one of the following authentications: Key or Passphrase. Then select [ Submit ].If you choose the Key authentication type for the new dataset, the ZFS key is generated on the CryptoHub and retrieved by TrueNAS as needed. If you choose the Passphrase option, KMIP creates the passphrase only if you attach TCG OPAL-capable disks to the NAS being used.