During ZFS re-silvering, are the GEOM ELI keys updated? Need to backup encryption keys again?

Operating Systems & Open Source Open Source & Web-Based
,
1

Hey all,

I’m sure this has been asked to death but I thought I’d still go right ahead. Today I was replacing a dead drive and noticed that a new encryption key is generated,

Apr 30 21:24:47 freenas-backup GEOM_ELI: Device gptid/asdasda-a9cc-11eb-883a-asdasdadad.eli created.
Apr 30 21:24:47 freenas-backup GEOM_ELI: Encryption: AES-XTS 256
Apr 30 21:24:47 freenas-backup GEOM_ELI:     Crypto: hardware

Does this mean I should export a full-backup of the encryption keys EACH time a drive is resilvered?

That’s it, thanks!

Cheers M.