Starting with vSphere 6.7, you can take advantage of virtual machine encryption. Encryption protects not only your virtual machine but also virtual machine disks and other files. You set up a trusted connection between vCenter Server and a key management server (KMS). vCenter Server can then retrieve keys from the KMS as needed.
For detailed information about virtual machine encryption, see the vSphere Security documentation.
