Chapter 12. Encryption 659
However, if you want to create encrypted child pools from an unencrypted storage pool that 
contains a mix of internal arrays and external MDisks, the following restrictions apply:
/SM590000The parent pool must not contain any unencrypted internal arrays. If any unencrypted 
internal array is in the unencrypted pool, when you try to create a child pool and select the 
option to set as encrypted, it is created as unencrypted.
/SM590000All V7000 Storwize control enclosures in the system must support software encryption and 
have the encryption license activated.
If you modify Pools view, you see the encryption status of child pools, as shown in 
Figure 12-73. The example shows an encrypted child pool with non-encrypted parent pool.
.
Figure 12-73   Child pool encryption state
12.8.3  Encrypted arrays
For more information about how to add internal storage to a pool, see Chapter 6, “Storage 
pools” on page 191. After encryption is enabled, all newly built arrays are hardware encrypted 
by default. In this case, the graphical user interface (GUI) does not allow you to create an 
unencrypted array. To create an unencrypted array, the command-line interface (CLI) must be 
used. Example 12-1 shows how to create an unencrypted array by using the CLI.
Example 12-1   Creating an unencrypted array using CLI
IBM_Storwize:ITSO-V7k:superuser>svctask mkarray -drive 6:4 -level raid1 -sparegoal 
0 -strip 256 -encrypt no Pool2
MDisk, id [2], successfully created
IBM_Storwize:ITSO-V7k:superuser>
Note: An encrypted child pool that is created from an unencrypted parent storage pool 
reports as unencrypted if the parent pool contains any unencrypted internal arrays. 
Remove these arrays to ensure that the child pool is fully encrypted.
Note: It is not possible to add unencrypted arrays to an encrypted pool.