This module provides several functions that are relevant to vSAN Encryption Export-ModuleMember -Function Invoke-VsanEncryptionRekey Export-ModuleMember -Function Set-VsanEncryption Export-ModuleMember -Function Set-VsanEncryptionKms Export-ModuleMember -Function Get-VsanEncryptionKms Export-ModuleMember -Function Set-VsanEncryptionDiskWiping Export-ModuleMember -Function Get-VsanEncryptionDiskWiping Set-VsanEncryption - Enables/Disables vSAN Encryption on a vSAN Cluster Get-VsanEncryptionKms - Get the current KMS for the vSAN Cluster Set-VsanEncryptionKms - Set (changes) the current KMS to an alternate KMS Get-VsanEncryptionDiskWiping - Get the current Disk Wiping state of an Encrypted vSAN Cluster Set-VsanEncryptionDiskWiping - Configure Disk Wiping to remove residual data performing a deep rekey Invoke-VsanEncryptionRekey - Invoke a shallow or deep rekey for an Encrypted vSAN Cluster Prerequisites/Steps to use this module: This module only works for vSphere products that support vSAN Encryption
Modules-master.zip
1 Comment - no search term matches found in comments.
This script shows a basic enumeration of vSAN Encryption reporting using the Get-VsanView cmdlet...Requires PowerCLI 6.5.1 (or higher) and vSAN 6.6 with Encryption enabled. #Encryption #vSAN #VMwarePowerCLI #PowerShell #Apache2.0
Vsan-EncryptionReport.ps1
3 Comments - no search term matches found in comments.
This requires PowerCLI 6.5.1 and has been tested on vSAN 6.6 #Apache2.0 #VMwarePowerCLI #powercli #Encryption #vSAN6.6 #PowerShell #vSAN
Vsan-EncryptionRekey.ps1
This dashboard shows the encryption status for hosts, cache disks, and capacity disks for the selected vSAN encrypted cluster as a series of heatmaps to quickly identify objects that do not have encryption enabled. This dashboard requires the following three super metrics. vSAN Host Encryption Status vSAN Cache Disk Encryption Status vSAN Capacity Disk Encryption Status How to Install: Download the above super metrics and import them in vRealize Operations 7.5+ Advanced or Enterprise by going to Administration -> Configuration -> Super Metrics -> Click the gear -> Import Super Metric
dashboard.json
RVC: PowerCLI: #vSAN #PowerShell #Apache2.0 #2Node #VMwarePowerCLI #StretchedCluster #DiskGroup #Witness #Encryption #disk #Cluster #reporting
Get-RvcVsanClusterInfo.ps1
Tested on vSAN 6.6 and PowerCLI 6.5.4 The KMS Server Appliances must have VMware Tools installed for this to work properly ** Powershell on MacOS may throw an error when performing KMS Host lookups ** Resolve this issue with adding KMS entries in the hosts file .SYNTAX Check-VsanKmsCircularDependency.ps1 -ClusterName #KMS #PowerShell #Encryption #vSAN #VMwarePowerCLI #Apache2.0
Check-VsanKmsCircularDependency.ps1