Disabling encryption with internal key management

Encryption with internal key management can be disabled using the management GUI or the command-line interface.

Note: For security, encryption methods (including the internal key management) can only be disabled when physically connected to the technician port on the configuration node.

Using the management GUI

When disabling encryption using the management GUI, internal key management is automatically disabled in the process. See Decommissioning encryption for instructions on disabling encryption using the management GUI.

To disable only the internal key management, refer to the instructions described in "Using the command-line interface”.

Using the command-line interface

Follow these steps to disable the internal key management:

Identify the configuration node of the system. For more information, see Configuration node.
Connect your computer to the technician port of the configuration node. For more information, see Node canisters
In a terminal window, use Secure Shell (SSH) software to connect to the cluster IP address of the system and authenticate using the credentials of any user with the SecurityAdmin role:
```
ssh username@cluster_ip
```
For more information, see Connecting to the CLI with OpenSSH.
To disable the internal key management, enter the following command:
```
chencryption -internal disable
```
For more information, see chencryption command.
The internal key management has been disabled successfully when the internal_key_status field is licensed. For more information, see lsencryption command.