Skip to main content
The last step required for the TrueNAS / KMES Series 3 integration is to create at least one encrypted dataset, which enables TrueNAS to start using KMIP. Datasets exist inside storage Pools, so if a storage Pool does not already exist, you need to create one. Refer to the following article on the TrueNAS Documentation Hub for setting up a storage Pool: https://www.truenas.com/docs/core/gettingstarted/storingdata/

​
Encrypt a new dataset

You can encrypt new datasets within an existing unencrypted storage pool without having to encrypt the entire pool. To encrypt a single dataset, complete the following steps:
1
Go to Storage> Pools, select the three vertical dots on the far right side of the menu for an existing dataset, and select Add Dataset.
2
In the Encryption Options area, unselect the Inherit checkbox and select the Encryption checkbox.
3
Choose which type of authentication to use: a Key or a Passphrase. Then select [ SUBMIT ].
If you choose Key as the type of authentication for the new dataset, the ZFS key is created on the KMES Series 3 and retrieved by TrueNAS as needed. If you choose the Passphrase option, the passphrase is created by KMIP if you attach TCG OPAL-capable disks to the NAS being used.