How it works
Threat model
Encryption protects at-rest data but does not replace access control or backups.
Key management
Record how keys are loaded and who can recover them after reboot or disaster.
Replication
Raw versus decrypted send behavior depends on supported encryption properties and options; validate on your Solaris release.
Worked examples
Each example explains the question it answers, a reproducible starting point, what to look for, and operational precautions.
1. Inspect encryption properties
Use this as a starting point for inspect encryption properties.
zfs get -r encryption,keystatus,keylocation tankInterpretation: Check command output against the expected host configuration; record the before/after state.
Operational note: Run commands in a test environment first; confirm device names, privileges and release-specific options.
2. Inspect mounts
Use this as a starting point for inspect mounts.
zfs list -o name,mounted,mountpointInterpretation: Check command output against the expected host configuration; record the before/after state.
Operational note: Run commands in a test environment first; confirm device names, privileges and release-specific options.
3. Check access controls
Use this as a starting point for check access controls.
ls -ld /tank/apps
getfacl /tank/appsInterpretation: Check command output against the expected host configuration; record the before/after state.
Operational note: Run commands in a test environment first; confirm device names, privileges and release-specific options.
Primary documentation
Read the relevant Oracle documentation for exact version-specific flags, supported platforms and limitations: Oracle primary reference ↗.
This field manual is independent, not affiliated with or endorsed by Oracle. Command examples should be adapted to your environment.