Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.futurex.com/llms.txt

Use this file to discover all available pages before exploring further.

Now that you have set up the KMES Series 3 as a key provider in vCenter Server, vSphere users with the required privileges can do the following tasks: This section demonstrates encrypting an existing virtual machine. Refer to the preceding VMware documentation links for instructions on performing the other various encryption tasks that the vSphere and KMES Series 3 KMIP integration makes possible.

​
Encrypting an existing virtual machine

You can encrypt existing virtual machines or virtual disks with vSphere client by changing their storage policy. However, you can encrypt virtual disks only for encrypted virtual machines.
Ensure that the virtual machine is powered off before beginning.
1
Log in to the vCenter Server system with the vSphere Client.
2
Right-click the virtual machine that you want to change and select VM Policies > Edit VM Storage Policies.You can set the storage policy for the virtual machine files, represented by VM home, and the storage policy for virtual disks.
3
Select the VM Encryption Policy in the drop-down menu.
  • To encrypt the VM and its hard disks, select an encryption storage policy and select [ OK ].
  • To encrypt the VM but not the virtual disks, toggle on Configure per disk, select the encryption storage policy for VM Home and other storage policies for the virtual disks, and select [ OK ].
4
(Optional) If you prefer, you can encrypt the virtual machine or both the virtual machine and disks from the Edit Settings menu in the vSphere Client. Perform the following steps:
  1. Right-click the virtual machine and select Edit Settings.
  2. Go to the VM Options tab and open Encryption.
  3. Choose an encryption policy. If you deselect all disks, only the VM home is encrypted.
  4. Select [ OK ].
If the VM encryption operation succeeds, the task status displays as Completed.

​
View the key

Perform the following steps to view the key that vSphere created on the KMES:
1
Log in to the KMES Series 3 application interface with the default Admin users.
2
Go to Key Management > Keys and expand the default application key group by selecting the group name.
You can see the AES-256 symmetric key that vSphere created and used to encrypt the virtual machine in the previous step.