When you enable restrictions for an encrypted virtual machine, how and when the virtual machine expires depends on a few factors.
When you enable restrictions for an encrypted virtual machine, the expiration date and time are fixed, for example, December 12, 2019, at 11:00 am in local time. The time and date are in Universal Time Coordinated (UTC) format.
When an encrypted virtual machine with an expiration date is powered on, the virtual machine verifies the time and compares it to the expiration date. While running, the virtual machine periodically checks the time and stores all successful timestamps as the last trusted time stamp. If the last trusted timestamp exceeds the date set for the virtual machine expiration, a warning message appears and the virtual machine is suspended.
After a virtual machine has expired, you can delete or extend its expiration date. To change the expiration date, shut down the guest operating system and provide the restrictions password. See Encrypt and Restrict a Virtual Machine.
