Hi Yuvaraj,

read the NetApp Encryption Power Guide, it includes everything needed to configure NVE/NSE: http://docs.netapp.com/ontap-9/topic/com.netapp.doc.pow-nve/home.html?cp=13_...

Regarding performance with NVE, some older numbers I know of: With an AFF8040 you have around 10-15% performance impact, with an AFF8080 it’s only around 0-5%. So it depends on your system but in general it’s negligible with all-flash systems. With spinning disks of course the disk will be the bottleneck. Also: more cores --> less impact on your workload.

For NVE you also need a CPU which supports the AES-NI extension, so check the specs.

You can use an onboard OKM or external key management with KMIP (since ONTAP 9.3). With the OKM: I’m not aware that the volume encryption keys would use up any noticeable space. I think they’re saved somewhere inside the VLDB (volume database) of WAFL, so in the metadata area.

As for NSE: Never used it myself but according to some colleagues the impact should be minor. But this info is from some years ago, maybe current SSD have a higher impact with NSE.

Imo: If storage encryption is not required, use NVE, you’re more flexible and with current systems you usually notice no impact.

Best regards Oliver

Von: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] Im Auftrag von Yuvaraja Shivaram Gesendet: Dienstag, 16. Oktober 2018 10:16 An: toasters Betreff: Regarding Configuration of NVE and NSE ...encryption in cmode

Hi All,

what are all the challenges we face during in installation?

heard about it will have some performance issue, so much load it put on filer end? and does it takes any of the space from filer end? for saving keys in OKM..

and anyone has good doc for the same..

Regards Yuvaraj Advanced UniByte GmbH Hauptsitz Metzingen: Paul-Lechler-Straße 8 | 72555 Metzingen HRB 352782 | Amtsgericht Stuttgart | Geschäftsführer: Sandro Walker Telefon: +49 7123 9542 - 0 | Fax: +49 7123 9542 - 3 - 100 | info@au.demailto:info@au.de | www.au.dehttp://www.au.de Niederlassung Freiburg: Kronenstraße 34 | 79211 Denzlingen Niederlassung München: Industriestraße 31 | 82194 Gröbenzell Niederlassung Leverkusen: Am "Platz der Innovationen" | Marie-Curie-Straße 16 | 51377 Leverkusen Diese E-Mail ist nur für den Empfänger bestimmt und kann vertrauliche oder rechtlich geschützte Informationen enthalten, deren Kopieren, Weitergabe an Dritte oder sonstige Verwendung untersagt ist. Wenn Sie nicht der richtige Empfänger sind, unterrichten Sie uns bitte umgehend telefonisch oder per E-Mail und löschen Sie diese E-Mail. Vielen Dank!