Changing a Project Encryption Key (CLI)

You can change the encryption key for a project at any time, even while it is in use by client systems. Changing a project encryption key changes the key for shares that inherit the key from the project.

If the parent pool of the project is encrypted, the project inherits encryption keys from the parent pool by default. You can change a key for a project without changing the key for the parent pool.

  1. Go to shares.
  2. Select the project for which you want to change the encryption key.

    If the project that is selected is not the one you want, use the select project-name command to select a different project.

  3. Change the project encryption key.

    Set the values of the keystore and keyname properties.

  4. Enter commit.

    All shares that are already inheriting encryption settings from this project will also inherit the new encryption settings. See Creating an Encrypted Filesystem or LUN (CLI).