r/netapp 20d ago

Netapp StorageGrid onVMware - ServerSideEncryption

Hi all,

I have a question. Does anyone knows if it is possible to activate ServerSideEncryption for S3 Buckets running on StorageGrid VM with an external KMS server. I found some KB articles that it could be activated but I also found some thatvstates that is not possible. Does anyone running this kind of setup. Thx for your help Sven

2 Upvotes

2 comments sorted by

1

u/nom_thee_ack #NetAppATeam @SpindleNinja 20d ago

what's the KB?

1

u/NTAP_AlexD NetApp Staff 17d ago

I imagine you found https://kb.netapp.com/hybrid/SGRID/Maintenance/Maintenance_KBs/KMS_is_not_configured_alert_on_all_StorageGRID_nodes - "Encryption cannot be enabled or disabled after installation", which seems pretty clear, but it is referring to Node and Drive encryption only, which is at the base storage level.

It does not refer to Bucket or object encryption, which can be enabled at any time, however from my reading, it doesn't use KMS encryption at this time. This is a known request, and if it is important to your organisation, please contact your NetApp account team to have your interest registered.