What distinguishes vSAN Data-in-Transit Encryption from vSAN Data-At-Rest Encryption?
vSAN Data-in-Transit Encryption encrypts storage traffic between hosts and manages its own keys, without requiring a Key Management Server. Data-At-Rest Encryption protects data written to storage devices and relies on key-management services, traditionally an external KMS.
Community Discussion