VMware Cloud Director Encryption Management is a solution add-on which grants tenant administrators the ability to use encryption keys from their own key providers for encryption of virtual machines (with or without vTPM devices), vApp templates, and named disks in their VMware Cloud Director virtual data centers (VDCs).

How to set up VMware Cloud Director Encryption Management

As a cloud provider, follow these steps to set up VMware Cloud Director Encryption Management for tenant organizations:

  1. Install VMware Cloud Director Encryption Management in a configured solution landing zone in your VMware Cloud Director environment.
  2. Register key providers through VMware Cloud Director Encryption Management and associate them with vCenter Servers.
  3. Publish key providers to tenant organizations.

Once a key provider is published for a tenant, they gain access to VMware Cloud Director Encryption Management.

As a tenant administrator, follow these steps to complete the key provider configuration:

  1. Authenticate to your key provider through VMware Cloud Director Encryption Management.

  2. Set up keys for encryption of VMs, vApp templates, and non-shared named disks in your VDCs.

VMware Cloud Director Encryption Management compatibility and upgrade

VMware Cloud Director Encryption Management 1.1 supports VMware Cloud Director 10.5 only. To use VMware Cloud Director Encryption Management with VMware Cloud Director 10.6, you must upgrade to VMware Cloud Director Encryption Management 1.2. You upgrade VMware Cloud Director Encryption Management as all standard add-on solutions for VMware Cloud Director. See Upgrade a Solution Add-On Instance in VMware Cloud Director.