Yes you can enable encryption at rest after data is on it but only new data is encrypted.  There is a command that can be run to force encryption during next cleaning.  Cleaning job might take a really long time so in general its probably not a good idea to run.  See Managing Encryption of Data at Rest in the admin guide for more info.