Host encryption mode must be enabled if you want to perform encryption tasks, such as creating an encrypted virtual machine, on an ESXi host. In most cases, host encryption mode is enabled automatically when you perform an encryption task.

In some cases, turning on encryption mode explicitly is necessary. See Prerequisites and Required Privileges for Encryption Tasks.


Required privilege: Cryptographic operations.Register host


  1. To enable host encryption mode, follow these steps.
  2. Connect to vCenter Server by using the vSphere Web Client.
  3. Select the ESXi host and click Configure.
  4. Under System, click Security Profile.
  5. Scroll down to Host Encryption Mode and click Edit.
  6. Select Enabled and click OK.