text: **12.2.2 Encrypted data**
  
  IBM Spectrum Virtualize performs data-at-rest encryption, which is the process of encrypting 
  data that is stored on the end devices, such as physical drives. 
  
  Data is encrypted or decrypted when it is written to or read from internal drives (hardware 
  encryption) or external storage systems (software encryption). 
  
  So, data is encrypted when transferred across the SAN only between IBM Spectrum 
  Virtualize systems and external storage. Data is*not*encrypted when transferred on SAN 
  interfaces under the following circumstances: 
  
  (cid:2) Server-to-storage data transfer 
  (cid:2) Remote copy (for example, Global or Metro Mirror) 
  (cid:2) Intracluster communication 
  
  **Note:**Only data-at-rest is encrypted. Host to storage communication and data that is sent 
  over links that are used for Remote Mirroring are not encrypted. 