ONTAP 9

to Japanese version

Rotate authentication keys for Storage Encryption

You can rotate authentication keys when using Storage Encryption (SE).

About this task

Rotating authentication keys in an SE environment is supported if you are using External Key Manager (KMIP).

Rotating authentication keys in an SE environment is not supported for Onboard Key Manager (OKM).

Steps
  1. Use the security key-manager create-key command to generate new authentication keys.

    You need to generate new authentication keys before you can change the authentication keys.

  2. Use the storage encryption disk modify -disk * -data-key-id command to change the authentication keys.

Top of Page