I am trying this method on my mirror setup FreeNAS11.1-U5 with a RAIDZ2. Successfully went through steps 1-7, so all single disks are encrypted. If I understand the latest posts on this thread, some users managed to re-key, re-passphrase before reboot, avoiding the lose of Jails and other config.
I would be interested to know how the re-keying, re-passphrasing and adding new recovery key before reboot works. In the GUI, the buttons related to encryption are not present. On the CLI, not sure which command is the right one to re-key. Maybe:
geli setkey [-pPv] [-n keyno] [-i iterations] [-j passfile] [-J newpassfile] [-k keyfile] [-K newkeyfile] prov
Any help well appreciated.
Thanks!