Could you avoid the "RE: Re:" prefix on the email title so that it's easier to have a single thread mail please?
1- From you solrconfig.xml, I suppose org.apache.solr.encryption.KmsKeySupplierFactory is your custom KeySupplierFactory, right? 2- Are you able to run the encryption tests? Do they pass? 3- From your traces, I see "ref key = 1071082519", which is surprising. Is it keyRef or keyId? keyRef should be a small integer normally. 4- Could you output the content of Map<String, String> commitUserData inside EncryptionDirectory.getLatestCommitData()? 5- Could you output the IndexOutput param of each call to EncryptionDirectory.maybeWrapOutput()? I would like to know if the _0_Lucene90FieldsIndex-doc_ids_0.tmp is encrypted. 6- Can you confirm that, until you call the EncryptionRequestHandler, auto commits are working, and the first auto commit after the EncryptionRequestHandler call fails?
