The vSphere Client supports many of the cryptographic operations. For other tasks, the vSphere API can be used.

Interfaces for Performing Cryptographic Operations

Interface

Operations

Information

vSphere Client

  1. Create encrypted VM.

  2. Encrypt and decrypt VMs.

This document.

PowerCLI

  1. Create encrypted VM.

  2. Encrypt and decrypt VMs.

  3. Configure vSphere Trust Authority.

VMware PowerCLI Cmdlets Reference.

vSphere Web Services SDK

  1. Create encrypted VM.

  2. Encrypt and decrypt VMs.

  3. Perform a deep recrypt of a VM (use a different DEK).

  4. Perform a shallow recrypt of a VM (use a different KEK).

vSphere Web Services SDK Programming Guide.

vSphere Web Services API Reference.

crypto-util

  1. Decrypt encrypted core dumps.

  2. Check whether files are encrypted.

  3. Perform other management tasks directly on the ESXi host.

Command-line help

vSphere Virtual Machine Encryption and Core Dumps