I created an encrypted pool when that was standard practice, but now that TrueNAS actively discourages this setup and considering the complications it brings, I’d like to switch to an unencrypted pool. I plan to keep my data on an encrypted dataset within this unencrypted pool.
Is there a way to decrypt the pool while maintaining the encryption on an existing dataset? Or will I need to back up my data, wipe the pool, set it up again, and then restore my data?
Thank you.
I am not aware of any complications that would come from a encrypted root dataset. You can still have individual child datasets unencrypted. I know that TrueNAS recommends against it - but I don’t think it’s necessary to migrate to an unencrypted root dataset.
ZFS encryption is always on a per dataset level. I know TrueNAS sometimes use the term “pool encryption” - but this is not a separate encryption. Pool encryption just means that the dataset root is encrypted. And usually if you create a new dataset it will be encrypted unless manually told otherwise. For example the ix-apps dataset will be unencrypted even if you create it on a “encrypted pool”.
You can’t unencrypt the root dataset. So you will have to recreate the pool if you want that.
