diff --git a/internal/rbd/controllerserver.go b/internal/rbd/controllerserver.go
index 48359c5fe..e048188ca 100644
--- a/internal/rbd/controllerserver.go
+++ b/internal/rbd/controllerserver.go
@@ -602,6 +602,10 @@ func (cs *ControllerServer) createVolumeFromSnapshot(
 		if err != nil {
 			return status.Errorf(codes.Internal, "failed to mark %q thick-provisioned: %s", rbdVol, err)
 		}
+		err = parentVol.copyEncryptionConfig(&rbdVol.rbdImage, true)
+		if err != nil {
+			return status.Errorf(codes.Internal, err.Error())
+		}
 	} else {
 		// create clone image and delete snapshot
 		err = rbdVol.cloneRbdImageFromSnapshot(ctx, rbdSnap, parentVol)