pool vs dataset encryption

[Fred974]

Hi,

I am setting a new TrueNAS system and I was wondering if someone could advise if it is better to encrypt the root pool on creation or only encrypt the dataset in the pool at later time?

Thank you

 

[sretalla]

I am setting a new TrueNAS system and I was wondering if someone could advise if it is better to encrypt the root pool on creation or only encrypt the dataset in the pool at later time?

You can't retroactively encrypt a dataset, so I think the answer to the question is you need to encrypt datasets when you create them.

If you don't want the pool root dataset encrypted (ever) then you don't need to set it at pool creation, but you can't change your mind later without recreating the pool.