> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aviatrix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Re-Encrypt Existing Controller and CoPilot Volumes Using a Custom Key

> You can re-encrypt your existing Controller and CoPilot volumes using a custom key.

You can re-encrypt your existing Controller and CoPilot volumes using a custom
key.

## Prerequisites

To proceed with the re-encryption process, check the prerequisites below:

1. Make sure the data on the Controller and CoPilot volumes are fully backed up.
2. Make sure your custom key meet the encryption standards and is stored
   securely.

## Re-encrypt Existing Controller and CoPilot Volumes

1. Log into CoPilot, from *Settings > Resources > Index Management*, click the
   download button to download the index lists.

2. Identify your old volume ID. Go to your cloud service provider console.
   Select your Aviatrix CoPilot deployment and under the *Storage* section,
   locate and note down the volume ID you intend to re-encrypt with your custom
   key.

3. Create a snapshot. Go to *Elastic Block Store > Snapshots > Create snapshot*.
   On the *Create snapshot* page, select the old volume ID from the volume
   drop-down list to generate a snapshot.

4. Create a volume from snapshot.
   1. Once the snapshot is created, select it and then click *Action > Create
      volume from snapshot*.
   2. On the subsequent volume settings page,specify your custom KMS key. Then
      click *Create volume*.

5. Detach the old volume. Click the old volume, then click *Action > Detach
   volume*, click *Detach* to confirm.

6. Attach the new volume that you encrypted with your custom KMS key.
   1. Go to the *Volumes* section, click the newly created volume, from
      *Actions > Attach volume*.
   2. On the *Attach volume* page, choose the intended instance from the
      drop-down list.
   3. Click *Attach volume* to confirm the volume attachment.

7. Verify the new volume with custom KMS key.
   1. Go to *EC2 > Instances* page, you can check the *Storage* tab, where the
      new volumes should be listed.
   2. You can also go to CoPilot, from *Settings > Resources > Index
      Management*, make sure the listed indices match those previously
      downloaded.

## Related Pages

* <a href={"/docs/enterprise/" + "10.1" + "/guides/controlplane/disk-management"}>CoPilot Disk (Volume) Management</a>
* <a href={"/docs/enterprise/" + "10.1" + "/reference/controlplane/tuning-performance"}>CoPilot Tuning and Performance</a>