Answer: To have MongoDB Backup Snapshot Encryption enabled the DBA would apply a master key that a KMIP-compliant key management appliance would generate and maintain. This master key encrypts key that encrypts the database.

As outlined in the MongoDB documentation :

“Prerequisites : A host running KMIP-compliant key management to generate and store encryption keys.

IMPORTANT

Clusters running MongoDB FCV 4.2 or later must use KMIP servers. These clusters don’t support local key management using files.

IMPORTANT

You must maintain all keys, even rotated keys, in the KMIP host.”

As part of satisfying this prerequisite  some steps need to completed : Set up KMIP Host Configuration for Ops Manager.

If these fields are empty , it suggests the Backup Snapshot Encryption is not enabled.

Author: Jack Vamvas