---
title: "Managing Encrypted Paths"
slug: "managing-encrypted-paths"
updated: 2026-10-27T17:23:45Z
published: 2026-10-27T17:23:45Z
canonical: "docs.vastdata.com/managing-encrypted-paths"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vastdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing Encrypted Paths

An *encrypted path* refers to a path that is encrypted with its own, dedicated encryption key.

The prerequisites are as follows:

- The cluster has encryption enabled.
- An external EKM is used.

**Note**: Creating an encrypted path on a directory exposed by an ABAC-enabled view is not supported.

- [Creating Encrypted Paths](/docs-5-3/docs/en/managing-encrypted-paths#creating-encrypted-paths)
- [Modifying Encrypted Paths](/docs-5-3/docs/en/managing-encrypted-paths#modifying-encrypted-paths)
- [Deleting Encrypted Paths](/docs-5-3/docs/en/managing-encrypted-paths#deleting-encrypted-paths)

## Creating Encrypted Paths

An encrypted path can only be created on a new path. A view can only be created on the path after it is created as an encrypted path.

Creating an encryption path creates a new encryption group and key for the path.

### Creating an Encrypted Path from the VAST Web UI

1. From the left navigation menu, select Element Store and then Encrypted Paths.

> [!NOTE]
> **Note**
> 
> The Encrypted Paths tab only appears in the VAST Web UI if EKM encryption is enabled.
2. Click Create Encrypted Path.
3. Complete the fields:

| Name | Provide a name for the encrypted path. |
| --- | --- |
| Tenant | Select the tenant on which want to create the path. |
| Path | Enter a path under the specified tenant that you want to create and encrypt. This must be a path that does not already exist. |
4. Click Create.

The path is created and an encryption key is created for the path. You can now create a view on the path.

### Creating an Encrypted Path from the VAST CLI

Use the [encryptedpath create](/docs-5-3/docs/en/encryptedpath-create) command.

## Modifying Encrypted Paths

You cannot change the tenant or the actual path of an existing encrypted path resource. You can only change its name.

### Modifying Encrypted Paths from the VAST Web UI

1. From the left navigation menu, select Element Store and then Encrypted Paths.
2. Right-click the encrypted path and select Edit.
3. In the Name field, modify the name.
4. Click Update.

### Modifying Encrypted Paths from the VAST CLI

To modify an encrypted path from the VAST CLI, use the [encryptedpath modify](/docs-5-3/docs/en/encryptedpath-modify) command.

## Deleting Encrypted Paths

Removing an encrypted path deletes the directory and the encryption group associated with the encrypted path.

### Deleting Encrypted Paths from the VAST Web UI

1. Right-click the encrypted path and select Remove.
2. Click Yes to confirm the removal.

### Deleting Encrypted Paths from the VAST CLI

Use the [encryptedpath delete](/docs-5-3/docs/en/encryptedpath-delete) command.