How to activate/generate the Encryption key for on premise upgraded orgs in CRM 2013 and what are the know impacts in the server?

Hi,

I have the on premise orgs (using https://) upgraded from 2011 to 2013. I don't have "Data Encryption" activated yet but I would like to activate it at some point. But what I can't find references is how to activate the "Data encryption". Do the following steps works to activate it?

Go to Settings > Data Management > Data Encryption. Once you click the Data Encryption link, a dialog opens that gives you the ability to activate the data encryption key. Click “Activate” to activate the Data Encryption

I would also like to be aware of know issues/impacts of activating it. What are the known issues or impacts?

1. Can we have a encrypted field in the org once we activate the “Data Encryption” like for SSN field?
2. How does it impact on the server performance?

Thanks!