vRanger VMware VM Encryption support (4036178)

Since VMware Sphere 6.5, virtual machine encryption has been released as a feature in order to protect sensitive data. Only users with administrative privileges can perform encryption and decryption tasks. When using VMware encryption, the following files are encrypted:

• Virtual machine disks. (.VMDK files)
• Virtual machine NVRAM.
• Core dumps.
• Virtual machine memory swap file. (.VSWP files)
• Virtual machine snapshot state file. (.VMSN files)

The following files cannot be encrypted by VMware vSphere:

• Virtual machine configuration files. (.VMX files)
• The VMSD file, which is a centralized file for storing information and metadata about virtual machine snapshots. 
• The virtual machine descriptor file.
• The virtual machine log file.
• Virtual Trusted Platform Module "vTPM" is not supported.

Backup of encrypted virtual machines:

vRanger Backup & Replication lets you back up encrypted virtual machines. The infrastructure must meet the following requirements:

• The virtual machine encryption instances must be pre-configured in the virtual infrastructure:
  1. The Key Management Server (KMS) must be configured in VMware vCenter.
  2. The VM encryption policy must be configured in vSphere Storage Policies.
  3. The VM policy must be applied to the virtual machines by a user with administrative permissions.

• If vRanger Backup & Replication is installed in a virtual machine and performs backups using hot-add (Machine-HotAdd transport method), vRanger server virtual machine must be encrypted in order to backup virtual machines. If the virtual appliances are being used to perform the backups (VA - HotAdd transport method), these virtual appliances must be encrypted.

• Backup of encrypted disks are not supported with SAN transport

Restore of encrypted virtual machines:

vRanger Backup & Replication supports restore of encrypted virtual machines. These scenarios are supported:

• Backup an encrypted virtual machine and restore it as an unencrypted VM.
• Backup an encrypted virtual machine and restore it as an encrypted VM. 
• Backup an unencrypted virtual machine and restore it as an encrypted VM.

Replication of encrypted virtual machines as encrypted or unencrypted VM's:

vRanger Backup & Replication allows you to replicate encrypted virtual machines as encrypted or unencrypted. The following scenarios are supported: