Disabling encryption

You can use either the management GUI or the command-line interface to disable encryption on the system.

If encryption is no longer needed, you can disable the function on the system. If you use a key server to manage keys and disable encryption, the master encryption keys remain on the key server, but are not used again. The administrator of the key server is responsible for removing unused or expired keys from the key server. If you are using a USB flash drive to manage keys and disable encryption, securely destroy all USB flash drives that contained encryption keys.

Note: Encrypted arrays must be removed before you disable encryption.

Using the management GUI

To disable encryption in the management GUI, complete the following steps:
  1. In the management GUI, select Settings > Security > Encryption.
  2. On the Encryption page, change the State to Disabled.

Using the command-line interface

To disable encryption on the system that uses a key server to manage encryption keys, enter the following command:
chencryption -keyserver disable
To disable encryption on the system that uses a USB flash drive to manage encryption keys, enter the following command:
chencryption -usb disable