---
title: Auto Scale Encryption
description: Encrypt the group nodes of an E2E scale group at rest with LUKS full-disk encryption, enabled at creation time.
---

# Auto Scale Encryption

Auto Scale encryption protects the data on a scale group's nodes **at rest** by encrypting their storage. Because group nodes are launched and terminated dynamically, encryption is applied automatically to every node the Scaler creates — so workloads that scale in response to demand stay protected even during rapid, unattended scaling events.

This page explains how encryption works and how to create an encrypted scale group. Encryption must be enabled **during creation** — it cannot be added to an existing scale group.

---

## How Auto Scale Encryption Works

- **Enable at creation.** In the **Security** section of the create flow, select **Enable Encryption**. You can optionally provide a passphrase for an added layer of protection.
- **LUKS full-disk encryption.** E2E uses LUKS (Linux Unified Key Setup) to encrypt group nodes at the block level. The default cipher is `aes-xts-plain64` with a 512-bit key, in line with industry best practice. Every node the Scaler launches for the group is encrypted the same way.
- **Automatic across the pool.** Encryption is applied to each new node without manual intervention, so a scale group that grows from 2 to 20 nodes encrypts all 20 consistently.
- **Managed from MyAccount.** The combination of LUKS encryption and management through the MyAccount portal lets you meet data-confidentiality and compliance requirements while scaling dynamically.

:::warning
Encryption can only be enabled at creation time. It cannot be enabled or disabled after the scale group is created. If you need an encrypted scale group, create a new one with encryption enabled. The encryption flag is shown only for groups that were created with encryption enabled.
:::

---

## Passphrase Rules

If you set an encryption passphrase, it must be **8 to 12 characters** and include at least one lowercase letter, one uppercase letter, and one special character (`!@#$%^&*`). Store the passphrase securely — it cannot be recovered.

---

## Create an Encrypted Scale Group

The flow is identical to a standard scale group, with the **Enable Encryption** step before launch.

1. **Log in** to the [MyAccount portal](https://myaccount.e2enetworks.com/).
2. Go to **Compute > Auto Scaling** and start the create flow.
3. **Select a saved image** in the **Ready** state.
4. **Select a plan.**
5. **Configure scale group settings** — name, minimum/maximum nodes, policy, and network.
6. **Enable encryption.** In the **Security** section, select the **Enable Encryption** checkbox and optionally enter a passphrase.
7. Select **Create Scale**.

For the full create flow and every field, see [Create a Scale Group](/docs/myaccount/auto-scaling/getting-started/create-scale-group).

---

## Related Resources

| Resource                                                                                    | Use it for                                     |
| ------------------------------------------------------------------------------------------- | ---------------------------------------------- |
| [Create a Scale Group](/docs/myaccount/auto-scaling/getting-started/create-scale-group)     | Full create flow with the encryption step.     |
| [Auto Scaling Concepts](/docs/myaccount/auto-scaling/getting-started/auto-scaling-concepts) | Saved images, plans, and policies.             |
| [Node Encryption](/docs/myaccount/node/features/encryption)                                 | Encryption-at-rest behavior for compute nodes. |
| [Node Images](/docs/myaccount/node/features/images)                                         | Capture a saved image for the group.           |

---