Backing up encryption key

[clarknova]

FreeNAS-9.10.2-U6

I have inherited a production FreeNAS systems that need upgrading. It was running some older version of 9.10 We upgraded it to the latest 9.10, but the attempt to upgrade it to 11.1 ended badly and we rolled it back to 9.10.2-U6.

I am going to attempt the upgrade again, and as I am anticipating it to go poorly again, my plan B is to do a clean install of 11.1-U7 and restore from backup. The problem is that I believe the zpool to be encrypted, which leads me to ask two questions:

1. How do I confirm whether the zpool is encrypted?
2. If it is encrypted, how do I prepare myself to import the pool after a clean install of FreeNAS 11.1?

When the system is rebooted, the zpool is mounted automatically, so it's either not encrypted, or there is a script somewhere that mounts it, yes?

Code:

# geli status
      Name  Status  Components
 da2p1.eli  ACTIVE  da2p1
 da3p1.eli  ACTIVE  da3p1
da13p1.eli  ACTIVE  da13p1
da55p1.eli  ACTIVE  da55p1
 da6p1.eli  ACTIVE  da6p1
 da7p1.eli  ACTIVE  da7p1
 da8p1.eli  ACTIVE  da8p1
 da9p1.eli  ACTIVE  da9p1
da10p1.eli  ACTIVE  da10p1
da11p1.eli  ACTIVE  da11p1
da12p1.eli  ACTIVE  da12p1
 da4p1.eli  ACTIVE  da4p1
da50p1.eli  ACTIVE  da50p1
da15p1.eli  ACTIVE  da15p1
da58p1.eli  ACTIVE  da58p1
da17p1.eli  ACTIVE  da17p1
da21p1.eli  ACTIVE  da21p1
da22p1.eli  ACTIVE  da22p1
da23p1.eli  ACTIVE  da23p1
da24p1.eli  ACTIVE  da24p1
da25p1.eli  ACTIVE  da25p1
da26p1.eli  ACTIVE  da26p1
da27p1.eli  ACTIVE  da27p1
da28p1.eli  ACTIVE  da28p1
da35p1.eli  ACTIVE  da35p1
da36p1.eli  ACTIVE  da36p1
da37p1.eli  ACTIVE  da37p1
 da5p1.eli  ACTIVE  da5p1
da39p1.eli  ACTIVE  da39p1
da40p1.eli  ACTIVE  da40p1
da45p1.eli  ACTIVE  da45p1
da46p1.eli  ACTIVE  da46p1
da47p1.eli  ACTIVE  da47p1
da48p1.eli  ACTIVE  da48p1
da49p1.eli  ACTIVE  da49p1
da38p1.eli  ACTIVE  da38p1
da51p1.eli  ACTIVE  da51p1
da52p1.eli  ACTIVE  da52p1
da53p1.eli  ACTIVE  da53p1
da34p1.eli  ACTIVE  da34p1
da14p1.eli  ACTIVE  da14p1
da18p1.eli  ACTIVE  da18p1
da19p1.eli  ACTIVE  da19p1
da20p1.eli  ACTIVE  da20p1
da56p1.eli  ACTIVE  da56p1
da29p1.eli  ACTIVE  da29p1
da30p1.eli  ACTIVE  da30p1
da33p1.eli  ACTIVE  da33p1
da41p1.eli  ACTIVE  da41p1
da42p1.eli  ACTIVE  da42p1
da43p1.eli  ACTIVE  da43p1
da44p1.eli  ACTIVE  da44p1
da59p1.eli  ACTIVE  da59p1
da16p1.eli  ACTIVE  da16p1
da57p1.eli  ACTIVE  da57p1
da60p1.eli  ACTIVE  da60p1
da61p1.eli  ACTIVE  da61p1
da62p1.eli  ACTIVE  da62p1
da63p1.eli  ACTIVE  da63p1
da64p1.eli  ACTIVE  da64p1
da65p1.eli  ACTIVE  da65p1
da66p1.eli  ACTIVE  da66p1
da67p1.eli  ACTIVE  da67p1
da68p1.eli  ACTIVE  da68p1
da31p1.eli  ACTIVE  da31p1
da54p1.eli  ACTIVE  da54p1

 

[clarknova]

After examining the documentation a little closer, it appears that our zpool is not encrypted, since we don't see the encryption icons as per Figure 8.1.15 in section 8.1.8.2 here:

https://ixsystems.com/documentation/freenas/11.1/storage.html

 

[danb35]

That sounds right. The .eli partitions are swap, which is always encrypted.