Sample Exchange

 View Only

vSAN Encryption Sample Module 

Jan 17, 2019 04:54 AM

This module provides several functions that are relevant to vSAN Encryption

Export-ModuleMember -Function Invoke-VsanEncryptionRekey
Export-ModuleMember -Function Set-VsanEncryption
Export-ModuleMember -Function Set-VsanEncryptionKms
Export-ModuleMember -Function Get-VsanEncryptionKms
Export-ModuleMember -Function Set-VsanEncryptionDiskWiping
Export-ModuleMember -Function Get-VsanEncryptionDiskWiping

Set-VsanEncryption - Enables/Disables vSAN Encryption on a vSAN Cluster

Get-VsanEncryptionKms - Get the current KMS for the vSAN Cluster
Set-VsanEncryptionKms - Set (changes) the current KMS to an alternate KMS

Get-VsanEncryptionDiskWiping - Get the current Disk Wiping state of an Encrypted vSAN Cluster
Set-VsanEncryptionDiskWiping - Configure Disk Wiping to remove residual data performing a deep rekey

Invoke-VsanEncryptionRekey - Invoke a shallow or deep rekey for an Encrypted vSAN Cluster

Prerequisites/Steps to use this module:

  1. This module only works for vSphere products that support vSAN Encryption. E.g. vSAN 6.6 and later with a vSAN Enterprise license
  2. All the functions in this module only work for KMIP Servers.
  3. Install the latest version of Powershell and PowerCLI(11).
  4. Import this module by running: Import-Module -Name "location of this module"

#Rekey
#vSphere
#Apache2.0
#VMwarePowerCLI
#vSAN
#Encryption
#PowerShell

Statistics
0 Favorited
0 Views
1 Files
0 Shares
0 Downloads
Attachment(s)
zip file
Modules-master.zip   21 KB   1 version
Uploaded - Apr 09, 2024

Tags and Keywords

Comments

Oct 25, 2022 05:36 PM

Hi Jase, do you have any guide like how to use this module, like any examples?
I wanted to test if we loose the KMS server and re-build the new KMS and use this module to rekey?

Related Entries and Links

No Related Resource entered.