Home > Storage > Unity XT > Virtualization, Cloud & Applications > Dell EMC Unity: VMware vSphere Best Practices > Data at Rest Encryption
Data at Rest Encryption (D@RE) is controller-based encryption that does not impact system performance. Dell Technologies recommends ordering Dell Technologies Unity systems as encryption-enabled, if appropriate for your environment.
Note: Encryption can only be enabled at the time of system installation with the appropriate license.
If encryption is enabled, Dell Technologies recommends making external backups of the encryption keys after system installation as well as immediately following any change in the system’s drive configuration (such as creating or expanding a storage pool, adding new drives, or replacing a faulted drive). Additional information regarding Data at Rest Encryption can be found in the Dell Technologies Unity: Data at Rest Encryption white paper.