Skip to main content

Configuring LVE

You must install the Lenovo Volume Encryption (LVE) license and configure key management services before you can encrypt data with LVE. Before installing the license, you should determine whether your ONTAP version supports LVE.

  • Determining whether your cluster version supports LVE
    You should determine whether your cluster version supports LVE before you install the license. You can use the version command to determine the cluster version.
  • Installing the license
    An LVE license entitles you to use the feature on all nodes in the cluster. You must install the license before you can encrypt data with LVE.
  • Configuring external key management
    You can use one or more external key management servers to secure the keys that the cluster uses to access encrypted data. An external key management server is a third-party system in your storage environment that serves keys to nodes using the Key Management Interoperability Protocol (KMIP).
  • Enabling onboard key management in ONTAP 9.6 and later (LVE)
    You can use the Onboard Key Manager to secure the keys that the cluster uses to access encrypted data. You must enable Onboard Key Manager on each cluster that accesses an encrypted volume or a self-encrypting disk.
  • Enabling onboard key management in ONTAP 9.5 and earlier (LVE)
    You can use the Onboard Key Manager to secure the keys that the cluster uses to access encrypted data. You must enable Onboard Key Manager on each cluster that accesses an encrypted volume or a self-encrypting disk.
  • Enabling onboard key management in newly added nodes
    You can use the Onboard Key Manager to secure the keys that the cluster uses to access encrypted data. You must enable Onboard Key Manager on each cluster that accesses an encrypted volume or a self-encrypting disk.