Configuring onboard key management | ONTAP

Enabling onboard key management in ONTAP 9.6 and later
You can use the Onboard Key Manager to secure the keys that the cluster uses to access encrypted data. You must enable Onboard Key Manager on each cluster that accesses an encrypted volume or a self-encrypting disk.

Enabling onboard key management in ONTAP 9.5 and earlier
You can use the Onboard Key Manager to secure the keys that the cluster uses to access encrypted data. You must enable Onboard Key Manager on each cluster that accesses an encrypted volume or a self-encrypting disk.

Assigning a data authentication key to a FIPS drive or SED (onboard key management)
You can use the storage encryption disk modify command to assign a data authentication key to a FIPS drive or SED. Cluster nodes use this key to access data on the drive.