If the database is already encrypted with a software keystore then use the following command to migrate to a CSP Vault-based HSM keystore: 

1. Migrate the database: 

   ./encrypt.sh migrate

2. Check the status:

   ./encrypt.sh status