Host encryption mode must be enabled if you want to perform encryption tasks, such as creating an encrypted virtual machine, on an ESXi host. In most cases, host encryption mode is enabled automatically when you perform an encryption task.

Before you begin

Required privilege: Cryptographic operations.Register host

About this task

In some cases, turning on encryption mode explicitly is necessary. See Prerequisites and Required Privileges for Encryption Tasks.


  1. To enable host encryption mode, follow these steps.
  2. Connect to vCenter Server by using the vSphere Web Client.
  3. Select the ESXi host and click Configure.
  4. Under System, click Security Profile.
  5. Scroll down to Host Encryption Mode and click Edit.
  6. Select Enabled and click OK.