---
title: "Enable full disk encryption in Charmed Ceph\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/ceph/docs/enabling-fde?format=md
keywords: index, follow
---

*Submit*

# Enable full disk encryption in Charmed Ceph

Full disk encryption (FDE) in Charmed Ceph allows operating encrypted OSDs in a Charmed Ceph cluster. See the [FDE explanation](https://ubuntu.com/ceph/docs/encryption#p-179246-full-disk-encryption) to learn more about FDE protection and its limitations.

## [Prerequisites](https://ubuntu.com/ceph/docs/enabling-fde?format=md#p-178138-prerequisites)

To use FDE, the following prerequisites must be met:

* The `dm-crypt` kernel module must be available. Note that some cloud-optimised kernels do not ship dm-crypt by default. Check by running:

  `sudo modinfo dm-crypt`
* The charm configuration option **osd-encrypt** must be set to **True**. You can verify its value by running:

  `juju config ceph-osd osd-encrypt`

## [Enable FDE](https://ubuntu.com/ceph/docs/enabling-fde?format=md#p-178138-enable-fde)

If the pre-requisites are met, after adding a new disk, it will be encrypted:

`juju run ceph-osd/* add-disk osd-devices=/dev/sdx`

Note that there is no facility to encrypt an OSD that is already part of the cluster. To enable encryption you will have to take the OSD disk out of the cluster, ensure data is replicated and the cluster converged and is healthy, and then re-introduce the OSD with encryption.

---

[Previous

Upgrading Ceph](https://ubuntu.com/ceph/docs/upgrading-ceph)
[Next

Report security vulnerabilities](https://ubuntu.com/ceph/docs/report-security-vulnerabilities)

This page was last modified 10 months ago. [Help improve this document in the forum](https://discourse.ubuntu.com/t/enable-full-disk-encryption-in-charmed-ceph/68577).