Encrypt volume data with NetApp Volume Encryption (NVE)

Refer to the NetApp ONTAP documentation (docs.netapp.com/us-en/ontap/encryption-at-rest/encrypt-volumes-concept.html) to understand and use the NVE capabilities, which include enabling the following operations:

Aggregate-level encryption (docs.netapp.com/us-en/ontap/encryption-at-rest/enable-aggregate-level-encryption-nve-license-task.html)
Encryption on new volumes (docs.netapp.com/us-en/ontap/encryption-at-rest/enable-encryption-new-volume-task.html)
Encryption on existing volumes (docs.netapp.com/us-en/ontap/encryption-at-rest/encrypt-existing-volume-task.html)
Encryption on the SVM root volume (docs.netapp.com/us-en/ontap/encryption-at-rest/configure-nve-svm-root-task.html)
Node root volume encryption (docs.netapp.com/us-en/ontap/encryption-at-rest/enable-root-volume-encryption-task.html)

For the preceding encryption operations, ONTAP communicates with the KMES Series 3 to create and use AES-256 keys through KMIP to encrypt and decrypt volume data as required.