You can do it from the admin client
go to application properties and encryption
settings.
There is a CPU hit for enabling encryption,
but it depends on what level of encryption (not certain if you can select
anything other than strong these days).
You should be able to google it, there
might be a red book, but don't know for certain.
--Steve