Skip to main content

Disabling encryption by default with ONTAP 9.7 and later

Starting with ONTAP 9.7, aggregate and volume encryption is enabled by default if you have a volume encryption (VE) licence and use an onboard or external key manager. You can disable encryption by default if required.

Before you begin

You must be a cluster administrator to perform this task, or an SVM administrator to whom the cluster administrator has delegated authority.

To disable encryption by default in ONTAP 9.7 or later, run the following command: options -option-name encryption.data_at_rest_encryption.disable_by_default -vserver (vservername or * for all) -option-value on
For complete command syntax, see the man page for the command.