Enabling encryption
Encryption can be enabled on drives only when a DDP (parity) group is created. If a DDP group is created with encryption disabled, you cannot later enable encryption on that group.
The following REST API command is used to create DDP groups:
POST base-URL/v1/objects/parity-groups
The following CCI raidcom command is used to create DDP groups:
raidcom add parity_grp
Disabling encryption
The encryption setting for a DDP group cannot be changed from enabled to disabled. If you want to disable encryption on drives, first migrate any volumes out of the target DDP group, delete the group, and then create a new DDP group with encryption disabled. If desired, you can then migrate the volumes to the new DDP group.
The following REST API command is used to delete DDP groups:
DELETE <base URL>/v1/objects/parity-groups/<object-ID>
The following CCI raidcom command is used to delete DDP groups:
raidcom delete parity_grp