As of the release of version 9.1, the main partition is fully encrypted on new templates. Here are the ways to determine if the partition on the appliance is already encrypted or not. From the Appliance Activity Logs, downloaded from Settings | Support, after the kbox_log.tgz file is decompressed, in the \kbox_logs\kbox\kboxwww\logs there is a file named klicensepinger_output In this file, the last line should say this: [DISK-ENCRYPTED] => 1 On the same klicensepinger_output file, the partitions are displayed. The /dev/da0p8 partition is the main partition, which is where the database resides. This partition, will show up with an extension of .eli, which means it is encrypted. If the size report runs and the partition does not have this extension, then this is not encrypted and it will require to follow the migration KB Article here.
In this example, /dev/da0p8.eli means that it's encrypted.