VMware Cloud Director Encryption Management is a solution add-on which grants tenant administrators the ability to use encryption keys from their own key providers for encryption of virtual machines (with or without vTPM devices), vApp templates, and named disks in their VMware Cloud Director virtual data centers (VDCs).

What's new in VMware Cloud Director Encryption Management 1.2

  • As a service provider, you can perform the following tasks.

    • Register a key provider cluster, that consists of multiple servers, which are configured in high availability and improve service reliability.

    • Publish a key provider with a custom name.

  • As a tenant administrator, you can perform the following tasks.

    • Use a unique encryption key for each object in your organization VDC.

    • Create a rotation schedule for your encryption keys.

    • Encrypt objects with a specific encryption policy, depending on the storage policy you use in your VDC.

    • Avoid re-encryption of the objects in your VDC, when removing an encryption policy.

How to set up VMware Cloud Director Encryption Management

As a cloud provider, follow these steps to set up VMware Cloud Director Encryption Management for tenant organizations.

  1. Install VMware Cloud Director Encryption Management in a configured solution landing zone in your VMware Cloud Director environment.
  2. Register key providers through VMware Cloud Director Encryption Management and associate them with vCenter Servers.
  3. Publish key providers to tenant organizations.

Once a key provider is published for a tenant, they gain access to VMware Cloud Director Encryption Management.

As a tenant administrator, follow these steps to complete the key provider configuration:

  1. Authenticate to your key provider through VMware Cloud Director Encryption Management.

  2. Set up keys for encryption of VMs, vApp templates, and non-shared named disks in your VDCs.

How to upgrade VMware Cloud Director Encryption Management

You upgrade VMware Cloud Director Encryption Management as all standard add-on solutions for VMware Cloud Director. See Upgrade a Solution Add-On Instance in VMware Cloud Director.
Note: Before upgrading your VMware Cloud Director to version 10.6, first upgrade VMware Cloud Director Encryption Management to version 1.2.
Table 1. VMware Cloud Director Encryption Management compatibility with VMware Cloud Director
VMware Cloud Director 10.5 VMware Cloud Director 10.6
VMware Cloud Director Encryption Management 1.1 ✅ ❌
VMware Cloud Director Encryption Management 1.2 ✅ ✅