3

What is the way in Solaris to encrypt a zpool? All the documentation supporting ZFS encryption talk about using "zfs create" and specifying a dataset WITHIN a pool. I just became SA for several Solaris servers and they all have encrypted zpools, but no documentation as to how they get that way. I know its possible since these servers have their pools configured with encryption, with no datasets on them. Any ideas?

Jon Smith
  • 33
  • 2
  • 1
    How do you know the zpools are encrypted? – ewwhite Dec 26 '14 at 22:16
  • I ran "zfs get encryption" and it shows the property as "on" for the zpool which contains no datasets. – Jon Smith Dec 26 '14 at 22:22
  • yes, this command shows the pool as unencrypted and data set encrypted. "zfs set encryption=on poolname" -> cannot set property for 'poolname': 'encryption' is readonly – 16851556 Oct 22 '20 at 10:05

1 Answers1

5

You just need to create the pool with encryption enabled for its top dataset:

zpool create -O encryption=on ...
jlliagre
  • 8,861
  • 18
  • 36