Encrypts what is stored on a vSAN cluster's capacity devices, with keys from a key provider. ESA does this inline while writing; enabling it on a cluster already in use causes a rolling reformat.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains vSAN data-at-rest encryption in context, with comparison tables and the common traps.
Terms in this definition
- vSAN
VMware's software-defined storage, which combines local devices across a cluster's ESX hosts into one shared datastore. Available as OSA or ESA, VCF can use it as principal storage.
- Capacity
A reserved block of compute for a tenant whose size is fixed by its SKU; Fabric F SKUs express it in capacity units (CUs). Workspaces assigned to it unlock features like Copilot, and from F64 upwards people with free licences can view Power BI content.
- KEYS
Lists the column or columns that identify each target row uniquely in an AUTO CDC statement.
- Index field attributes
Settings applied to each field in an Azure AI Search index:
searchablefor full text,retrievableto return it,filterablefor exact-match$filter,sortable,facetablefor counts, andkeyfor the unique document ID. - Provider
The organisation that shares data in OpenSharing. Recipients also see a provider as a Unity Catalog securable, from which shares can be mounted as catalogs.