If you are retiring volumes so that you can implement encryption at rest, you will need to then reformat and remount the volumes. You can contact Support for a utility to streamline this process, or you can follow the manual process, below. (v10.1)
To convert existing volumes to use encryption-at-rest without the utility, migrate the data using a chassis-by-chassis approach:
- Enable the encryption-at-rest settings for the cluster, which will apply to newly formatted volumes.
- Starting with the first chassis, retire it: from the Storage UI, select Cluster > Hardware, open the Chassis Details, and select Retire from the action (gear) menu.
- Wait for all of its volumes to reach a status of "retired".
- From the system console on the physical chassis, stop the storage processes: System Control > 3. Stop Storage Processes
- Format all of the disks, which will now be encrypted: Disk Volumes > ALL
Reboot the chassis: System Control > 1. Reboot System
As Swarm detects each new volume, it formats it as encrypted (using thedisk.encryptionKeyPrimaryvalue) and mounts it.Note
You may change the key used to encrypt new Swarm volumes at any time, but your existing Swarm volumes will not be re-encrypted. To re-encrypt them, retire and reformat them, using the new encryption key.
- With the first chassis complete, repeat all steps until every chassis has been converted.
Related articles