跳转到主内容

如何取消对NAE卷的加密?

Views:
8
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
CORE
Last Updated:

适用场景

  • ONTAP 9
  • NetApp 卷加密 (NetApp Volume Encryption, NVE)
  • NetApp聚合加密(NAE)

问题解答

请使用以下方法之一:

1.使用其他聚合:

a.将卷移动到另一个非NAE聚合并将其转换为纯文本卷:

::> volume move start -vserver <vserver_name> -volume <volume_name> -destination-aggregate <aggr_name> -encrypt-destination false -encrypt-with-aggr-key false

2.使用同一聚合:

a.假设现有NAE聚合中有空间、请移动卷以将其从NAE转换为同一聚合中的NVE (NAE聚合允许):

::> volume move start -vserver <vserver_name> -volume <volume_name> -destination-aggregate <aggr_name> -encrypt-destination true -encrypt-with-aggr-key false

b.在所有卷均为NVE且不存在NAE加密卷之后,请 在聚合上禁用NAE:::> aggregate modify -aggregate <aggr_name> -node <node_name> -encrypt-with-aggr-key false。 

注意请确保不存在任何聚合Snapshot副本,否则命令将失败。

c.移动NVE卷以取消对其加密并将其转换为 纯文本:

::> volume move start -vserver <vserver_name> -volume <volume_name> -destination-aggregate <aggr_name> -encrypt-destination false

注意: 如果 未执行步骤b、则卷移动将失败、并显示以下错误:

Error: command failed: The destination aggregate "aggr_name" is an NAE (NetApp Aggregate Encryption) aggregate. Non-encrypted volumes are not supported in such aggregates.

 

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.