Starting with vSphere 7.0, you can take advantage of virtual machine encryption. Encryption protects not only your virtual machine but also virtual machine disks and other files.
You set up a trusted connection between vCenter Server and a key management server (KMS). vCenter Server can then retrieve keys from the KMS as needed.
For detailed information about virtual machine encryption, see the vSphere Security documentation.
