> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create an encrypted dataset

> Procedural guide to create an encrypted dataset in TrueNAS to enable KMIP-based encryption.

The last step required for the TrueNAS / KMES Series 3 integration is to create at least one encrypted dataset, which enables TrueNAS to start using KMIP.

Datasets exist inside storage Pools, so if a storage Pool does not already exist, you need to create one. Refer to the following article on the TrueNAS Documentation Hub for setting up a storage Pool: [**https://www.truenas.com/docs/core/gettingstarted/storingdata/**](https://www.truenas.com/docs/core/gettingstarted/storingdata/)

## Encrypt a new dataset

You can encrypt new datasets within an existing unencrypted storage pool without having to encrypt the entire pool. To encrypt a single dataset, complete the following steps:

<Steps>
  <Step>
    Go to **Storage**>
    **Pools**, select the three vertical dots on the far right side of the menu for an existing dataset, and select **Add Dataset**.
  </Step>

  <Step>
    In the **Encryption Options** area, unselect the **Inherit** checkbox and select the **Encryption** checkbox.
  </Step>

  <Step>
    Choose which type of authentication to use: a **Key** or a **Passphrase**. Then select **\[ SUBMIT ]**.
  </Step>
</Steps>

If you choose **Key** as the type of authentication for the new dataset, the ZFS key is created on the KMES Series 3 and retrieved by TrueNAS as needed. If you choose the **Passphrase** option, the passphrase is created by  KMIP if you attach TCG OPAL-capable disks to the NAS being used.