Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

request system filesystem encryption enable

date_range 24-Oct-24

Syntax

content_copy zoom_out_map
request system filesystem encryption enable
<dry-run | re0 | re1>

Prerequisites

Following are the prerequisites to enable file-system encryption:

  • System contains a TPM2.0 with IDevID provisioned.

  • System having single or redundant disk are supported.

  • Take data backup of configurations and log files.

Description

When you enable encryption process on the file-system, the conversion process starts with the backup routing engine followed by the active Routing Engine. In the case of redundant disks, the conversion starts with the primary disk followed by the secondary disk to avoid loss of data.

Once enabled, the encryption cannot be disabled and all the software image versions that does not support file-system encryption are deleted.

Options

none

Enable file-system encryption on all Routing Engines.

dry-run

(Optional) Display the file-system encryption message without running the encryption process.

re0

(Optional) Enable file-system encryption on RE0.

re1

(Optional) Enable file-system encryption on RE1.

routing-engine

(Optional) Enable file-system encryption on the specified Routing Engine. Use one of the following options to specify the Routing Engine:

Backup Backup Routing Engine
Both Both Routing Engines
Local Local Routing Engine
Master Primary Routing Engine
Other Other Routing Engine

Required Privilege Level

maintenance

Sample Output

request system filesystem encryption enable (Junos OS)

content_copy zoom_out_map
user@host> request system filesystem encryption enable
content_copy zoom_out_map
Please check the message on enabling filesystem encryption enable using the dry-run option. i.e.
request system filesystem encrypton enable dry-run
Do you want to proceed ? [yes,no] (no) yes

Enable filesystem encryption ? [yes,no] (no) yes


A vmhost reboot is required to start filesystem encryption.

During the conversion process, the vmhost reboot using request vmhost reboot is required to start file-system encryption and to reflect the changes.

request system filesystem encryption enable (Junos OS Evolved)

content_copy zoom_out_map
user@host> request system filesystem encryption enable
content_copy zoom_out_map
Please check the message on enabling filesystem encryption enable using the dry-run option. i.e.
'request system filesystem encrypton enable dry-run'
Do you want to proceed ? [yes,no] (no) yes

-------------------------------
node: re0
-------------------------------
Removing version junos-evo-install-ptx-x86-64-23.4R2.14-EVO...
Removing external packages for junos-evo-install-ptx-x86-64-23.4R2.14-EVO...
Done.
Done.

A reboot is required to start the encryption.
Issue 'request system reboot' command when ready.

Release Information

Command introduced in Junos OS Release 22.3R1.

footer-navigation