---
title: "Enabling Encryption After Installation"
slug: "enabling-encryption-after-installation"
tags: ["5.4"]
updated: 2026-10-28T01:54:48Z
published: 2026-10-28T01:54:48Z
canonical: "docs.vastdata.com/enabling-encryption-after-installation"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vastdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enabling Encryption After Installation

## Overview

- If encryption was not enabled at installation, you can enable internal encryption (encryption with internal key management). After enabling internal encryption, you can switch from internal encryption to an EKM.
- If internal encryption was enabled at installation, you can switch from internal encryption to an EKM.
- You cannot switch between EKM types.

When encryption is enabled on the cluster, every tenant created on the cluster must be associated with an encryption group. This can be a new or a pre-existing encryption group.