I found the statement that hardware appliances don't have the option to disable encryption:
"Only the new VMs deployed post 6.7 have the options to determine if they want to use this or not.".
Starting ClearPass 6.7 there was a switch to full-disk encryption with 256-bit encryption, which more or less obsoletes the information that you found.
If you need a legally binding statement, please work with your local Aruba SE.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Sep 07, 2022 08:29 AM
From: Jonas Hammarback
Subject: Disk encryption on hardware ClearPass servers?
Hi
When installing a new virtual server one option is to enable disk encryption. What is the situation on hardware servers?
Are the disks encrypted, or just part of the data? Any difference between the three hardware models C1000, C2010 and C3010?
I have searched documentation and community forums but only found one forum question realated to this and the answer was that sensitive files and directories are encrypted with AES-128.
https://community.arubanetworks.com/community-home/digestviewer/viewthread?GroupId=55&MID=19044&CommunityKey=2477474f-de43-4598-a465-c179d41fdd0b
------------------------------
Best Regards
Jonas Hammarbäck
ACCX #1335, ACMP, ACDP, ACNSP, ACEP
Aranya AB
------------------------------