The docs (https://www.ibm.com/support/knowledgecenter/#!/SSFKCN_4.1.0/com.ibm.cluster.gpfs.v4r1.gpfs200.doc/bl1adv_encryption.htm) Do say at rest. It also says it protects against an untrusted node in multi cluster. I thought if you were root on such a box, whilst you cant read the file, you could delete it? Can we clear that up? Simon ________________________________________ From: gpfsug-discuss-bounces at spectrumscale.org [gpfsug-discuss-bounces at spectrumscale.org] on behalf of Oesterlin, Robert [Robert.Oesterlin at nuance.com] Sent: 01 April 2016 16:28 To: gpfsug main discussion list Subject: Re: [gpfsug-discuss] Encryption - guidelines, performance penalties? Thanks for clearing that up! Bob Oesterlin Sr Storage Engineer, Nuance HPC Grid 507-269-0413 From: <gpfsug-discuss-bounces at spectrumscale.org<mailto:gpfsug-discuss-bounces at spectrumscale.org>> on behalf of Sven Oehme <oehmes at gmail.com<mailto:oehmes at gmail.com>> Reply-To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org<mailto:gpfsug-discuss at spectrumscale.org>> Date: Friday, April 1, 2016 at 10:19 AM To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org<mailto:gpfsug-discuss at spectrumscale.org>> Subject: Re: [gpfsug-discuss] Encryption - guidelines, performance penalties? its done on the client )