NKP

In the Ultra Transcenders books

2V0-15.25

Each book explains NKP in context, with comparison tables and the common traps.

Terms in this definition

• vCenter

  Management software for VMs, clusters and ESX hosts. Each domain in VCF gets a dedicated one.

• KEYS

  Lists the column or columns that identify each target row uniquely in an AUTO CDC statement.

• Encryption

  Scrambling data so it cannot be read without the correct secret key, which is then used to turn it back again. Hashing, by contrast, cannot be reversed.

• vTPM

  A virtualised Trusted Platform Module within a VM. On confidential VMs, the OS disk keys are bound to it by confidential disk encryption.

• Index field attributes

  Settings applied to each field in an Azure AI Search index: searchable for full text, retrievable to return it, filterable for exact-match $filter, sortable, facetable for counts, and key for the unique document ID.

• Key Management Server

  Encryption keys are created and stored on this external system, then shared out by vCenter. Disk groups lock when an encrypted vSAN host restarts and has no access to it.

• Virtual machines

  Infrastructure-as-a-service compute giving complete control of the operating system, making it a fit for lift-and-shift moves and for software relying on OS-level pieces like COM.

• Bulk migration

  Not a zero-downtime option: with this VCF Operations HCX method, a live VM is copied through host-based replication and then, at an optionally scheduled switchover, the original is shut down, final changes are synchronised and the replica started, costing roughly a reboot's worth of outage.

Related terms

• HSM

  Two terms share these letters in VCF. As a hardware security module it is tamper-resistant hardware holding keys, which vSphere Native Key Provider cannot use and only a third-party key server behind a standard key provider can offer; as a hardware support manager it is the OEM's vCenter plug-in from whose depot vSphere Lifecycle Manager draws firmware and driver add-ons for a cluster image.

• KDK

  A key created by vCenter for a vSphere Native Key Provider and distributed to the hosts in a cluster. Each host uses it to derive encryption keys locally, so no external key server has to supply KEKs.

• KMIP

  An industry-standard protocol through which a client application talks to a key management server. vCenter acts as a KMIP client for a standard key provider, whereas vSphere Native Key Provider does not need a KMIP server at all.

• KMS

  A KMIP-compliant key server, separate from vCenter, that provides KEKs through a standard key provider. When vSphere Native Key Provider is used, no such server is required.