You can select an encryption key when you replicate the image. Then, the system will generate an encrypted version of the unencrypted image.