Host encryption mode must be set if you want to perform encryption tasks, such as creating an encrypted virtual machine, on an ESXi host. In most cases, host encryption mode is activated automatically when you perform an encryption task.

Sometimes, turning on encryption mode explicitly is necessary. See Prerequisites and Required Privileges for Virtual Machine Encryption Tasks.


Required privilege: Cryptographic operations.Register host


  1. Log in to the vCenter Server by using the vSphere Client.
  2. Browse to the ESXi host and click Configure.
  3. Under System, click Security Profile.
  4. Click Edit in the Host Encryption Mode panel.
  5. Select Enabled and click OK.