Use the following workflow to encrypt an existing volume by migrating it to an encrypted DDP group:
- Create a new DDP group with encryption enabled.
- Create a new volume in the encrypted DDP group.
- Create a volume pair using Volume Migration or ShadowImage.
- Migrate or replicate the existing volume to the new volume in the encrypted DDP group.
The data in the target volume of the pair is now encrypted on the storage system.
- Delete the volume pair.
- Shred or otherwise eradicate the data in the source volume of the pair.