Powercli command to enable host encryption

[jcw345]

Per vmware docs, you can explicitly enable host encryption.

Enable Host Encryption Mode Explicitly

I can't seem to find a way to do that via powercli.

Any hints?

Thanks!

[LucD]

There are currently no cmdlets to do that.
You will have to use the API methods directly, i.e. ConfigureCryptoKey

But do you already have a KMS server in place?

To be done via the RegisterKmipServer method.

[jcw345]

Thanks, LucD

Yup. Full KMS cluster in place, vm encryption has been working great, but recently, not all esx hosts are automatically entering safe mode to receive encrypted vms via vmotion/poweron.

I've opened a ticket with vmware support to investigate.

[LucD]

I forgot about the VMware.VMEncryption module.

That might help with the KMS part.

Mike did a post on that, see PowerCLI for VM Encryption

[jcw345]

Found the powercli command: set-vmhost

set-vmhost ESX111 -KmsCluster (vmware.vimautomation.storage\get-kmscluster kmscluster111)

[LucD]

Thanks for sharing that.