Hi Stephen,
yes, NVE is a purely software-defined encryption on a per Volume basis, also supported on ONTAP Select for example.
From what I understand it doesn’t matter if one HA pair in the cluster is capable of NVE, the others can still use NVE on their Volumes.
You just cannot move an encrypted Volume to a non-capable HA-pair without explicitly specifying the “-encrypt-destination false” option
in the vol move command (which then moves it over unencrypted).
Best regards
Marcel
Marcel D. Juhnke - Senior Storage Analyst
EALA IS Delivery Center - ASG
Accenture Services GmbH
Graf-Stauffenberg-Str. 6 - D-95030 Hof / Germany
Phone: +49 (9281) 925 2877
Mobile: +49 (175) 57 60019
Mail / Skype for Business: marcel.juhnke@accenture.com
Sitz: Kronberg. Registergericht: Königstein im Taunus, HRB 5967.
Geschäftsführer: Marcus Huth, Frank Mang, Stefan Smolka, Michael Sturm.
--- Confidential ---
From: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net]
On Behalf Of Stephen Stocke
Sent: Mittwoch, 25. Januar 2017 23:45
To: Parisi, Justin <Justin.Parisi@netapp.com>
Cc: toasters@teaparty.net
Subject: Re: Volume Encryption Hardware
Thanks Tim and Justin for your replies.
I'm also wondering if you can mix NVE and non-NVE capable hardware in the same cluster and still license and use the feature? (On volumes hosted on the NVE capable HA pair). The NSE documentation has a statement about heterogeneous clusters
but I can't find one regarding NVE. Specifically, I'd like to scale-out an existing FAS2552 switched cluster with a FAS2650 HA pair. In that scenario, can we use NVE for volumes on the FAS2650 aggregates?
On 25 January 2017 at 21:41, Parisi, Justin <Justin.Parisi@netapp.com> wrote:
In general, the hardware requirement is a platform that has processors that are AES-NI capable to do the encryption offloading to offset performance. All new platforms will have that, for the most part.
From: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of Tim Stiller
Sent: Wednesday, January 25, 2017 12:51 PM
To: Stephen Stocke <scstocke@gmail.com>; toasters@teaparty.net
Subject: Re: Volume Encryption Hardware
Hi Stephen,
a complete list of supported platforms for NVE is available here:
http://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.pow-nve%2FGUID-EAD13D8E-0219-45B6-A2C6-B25B76C9CA1A.htmlbest regards,
Tim
Stephen Stocke <scstocke@gmail.com> schrieb am Mi., 25. Jan. 2017 um 18:38 Uhr:
Hello
I'm trying to find an official list of which hardware supports the new 9.1 Netapp Volume Encryption (NVE) feature. I've checked HWU and can't see anything that shows NVE compatibility. I've also tried IMT but I've never been able to get along with that tool.
Specifically, I'm trying to find out if the FAS2500 series or new FAS2650 platforms support this feature.
I've listened to TechOnTap podcast #59 in which the speakers discuss NVE but I'm now looking for the "official" documentation on hardware support.
Any pointers to the right docs would be greatly appreciated!
Kind regards
Steve
_______________________________________________
Toasters mailing list
Toasters@teaparty.net
http://www.teaparty.net/mailman/listinfo/toasters