Configuring encryption

The system supports optional encryption of data at rest. This support protects against the potential exposure of sensitive user data and user metadata that is stored on discarded, lost, or stolen storage devices.

To use encryption on the system, you must enable encryption and create copies of the keys.

If your system contains existing volumes in non-encrypted pools after you configure encryption, you can migrate these volumes to encrypted pools.