Cluster external key servers

Clustered external key management servers support is added for Fujitsu partners who provide a clustered KMIP server solution. This allows primary and secondary KMIP servers to be added preventing duplication of encryption key data. Please contact technical support personnel for supported partners.

SnapMirror asynchronous policy in ONTAP System Manager

SnapMirror Cloud single directory restore

Enables cluster administers at the admin privilege level to perform a single directory restore operation from a cloud endpoint. The source endpoint UUID must be provided to identify the backup endpoint from which you are restoring. Because multiple backups can use the same cloud_endpoint_name as the destination, the UUID associated with the backup must be provided for the restore command. You can use the snapmirror show command to obtain the source_endpoint_uuid.

Enhanced support for SnapMirror active sync

SVM data replication quick resync

SVM data replication quick resync provides storage admins with the ability to bypass a full data warehouse rebuild and to recover more quickly from a disaster recovery rehearsal.

SVM data replication support with MetroCluster

SVM-DR source is supported on both ends of a MetroCluster configuration.

In the REST API, consistency groups support a two-phase Snapshot procedure, enabling you to conduct a precheck before committing the Snapshot.

TLSv1.3 support

ONTAP supports TLS 1.3 for HTTPS and REST API management protocols. TLS 1.3 is not supported with SP/BMC or with Cluster Peering Encryption.

LDAP fast bind support

If supported by the LDAP server, you can use LDAP fast bind to authenticate ONTAP admin users quickly and simply.

ONTAP Mediator 1.4 support

ONTAP Mediator software version 1.4 is supported in MetroCluster IP configurations.

Consistency group support

Consistency groups are supported in MetroCluster configurations.

Link Layer Discovery Protocol (LLDP)

The cluster network supports LLDP to allow ONTAP to work with cluster switches that do not support Cisco Discovery Protocol (CDP).

LIF services

New client-side LIF services provide more control over which LIFs are used for outbound AD, DNS, LDAP, and NIS requests.

Additional support for S3 object actions

iSCSI LIF failover

The new iSCSI LIF failover feature supports automatic and manual migration of iSCSI LIFs in an SFO partner failover and in a local failover. iSCSI LIF failover is available on All SAN Array (ASA) platforms.

Non-destructive migration from LUN to NVMe namespace and from NVMe namespace to LUN

Use the ONTAP CLI to in-place convert an existing LUN to an NVMe namespace or an existing NVMe namespace to a LUN.

Autonomous Ransomware Protection (ARP) enhancements

The ARP detection algorithm has been enhanced to detect additional malware threats. Also, a new license key is used to activate Autonomous Ransomware Protection. For ONTAP systems upgrades from ONTAP 9.10.1 the previous license key still provides the same functionality.

Multi-admin verification

When multi-admin verification is enabled, certain operations — such as deleting volumes or Snapshot copies — can be executed only after approvals from designated administrators. This prevents compromised, malicious, or inexperienced administrators from making undesirable changes or deleting data.

View physical footprint savings

When you have temperature sensitive storage efficiency enabled on a volume, you can use the volume show-footprint command to display the physical footprint savings.

SnapLock support for FlexGroup volumes

SnapLock includes support for data stored on FlexGroup volumes. FlexGroup volumes support is available with SnapLock Compliance and SnapLock Enterprise modes.

SVM data mobility

Increases the number of ETERNUS AX series supported to three and adds support for SnapMirror relationships when the source and the destination are both running ONTAP 9.11.1 or later. External key management (KMIP) is also introduced and is available for both Cloud and on-premises installations.

Activity tracking at the SVM level in File System Analytics

Activity Tracking is aggregated at the SVM level, tracking read/write IOPS and throughputs to provide instant and actionable insights into data.

Enable file access time updates

When enabled, the access time updates at the FlexCache origin volume only if the age of the current access time is more than user-specified duration.

Asynchronous directory delete

Asynchronous delete is available to NFS and SMB clients when the storage administrator grants them rights on the volume. When async delete is enabled, Linux clients can use the mv command and Windows clients can use the rename command to delete a directory and move it to a hidden .ontaptrashbin directory.

SnapLock support for FlexGroup volumes

SnapLock includes support for data stored on FlexGroup volumes. FlexGroup volumes support is available with SnapLock Compliance and SnapLock Enterprise modes. SnapLock does not support the following operations on FlexGroup volumes: SnapLock for SnapVault, event-based retention, and Legal Hold.

SVM data mobility

Increases the number of ETERNUS AX series supported to three and adds support for SnapMirror relationships when the source and the destination are both running ONTAP 9.11.1 or later. External key management (KMIP) is also introduced and is available for both cloud and on-premises installations.

Manage SnapMirror asynchronous policies

Hardware visualization

The hardware visualization feature in ONTAP System Manager supports all current ETERNUS AX and ETERNUS HX Series.

System analytics insights

On the Insights page, ONTAP System Manager helps you optimize your system by displaying additional capacity and security insights and new insights about the configuration of clusters and storage VMs.

Usability enhancements

Advanced local tier (aggregate) operations

Manage audit logs

You can use ONTAP System Manager to view and manage ONTAP audit logs.