> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create an encrypted dataset in TrueNAS

> Instructions to create an encrypted dataset in TrueNAS as part of KMIP integration setup.

Create at least one encrypted dataset for the TrueNAS and CryptoHub integration in this final stage, enabling TrueNAS to start using KMIP.

Datasets exist inside storage pools, so you must create one if a storage pool does not already exist. Refer to the following article on the TrueNAS Documentation Hub for setting up a storage pool:

[**https://www.truenas.com/docs/core/gettingstarted/storingdata/**](https://www.truenas.com/docs/core/gettingstarted/storingdata/)

## Encrypt a new dataset

You can encrypt new datasets within an existing unencrypted storage pool without encrypting the entire pool. To encrypt a single dataset, complete the following steps:

<Steps>
  <Step>
    Go to**Storage** > **Pools**, select the three vertical dots on the far right side of the menu for an existing dataset, and select **\[ Add Dataset ]**.
  </Step>

  <Step>
    In the **Encryption Options** area, deselect **Inherit** and select **Encryption**.
  </Step>

  <Step>
    Choose one of the following authentications: **Key** or **Passphrase**. Then select **\[ Submit ]**.

    If you choose the **Key** authentication type for the new dataset, the ZFS key is generated on the CryptoHub and retrieved by TrueNAS as needed. If you choose the **Passphrase** option, KMIP creates the passphrase only if you attach TCG OPAL-capable disks to the NAS being used.
  </Step>
</Steps>