What is vSphere Virtual Machine Encryption? · Ultra Transcenders glossary

ESX encrypts a VM's files and disks with a per-VM XTS-AES-256 data key, which a key encryption key from the key provider then wraps.

In the Ultra Transcenders books

Each book explains vSphere Virtual Machine Encryption in context, with comparison tables and the common traps.

ESX
VMware's bare-metal hypervisor, installed on each host in a VCF fleet. Up to version 9.0 it was known as ESXi.
XTS-AES-256
AES with 256-bit keys in XTS mode, a cipher mode designed for encrypting stored data; vSphere VM encryption uses it for data encryption keys.
Index field attributes
Settings applied to each field in an Azure AI Search index: searchable for full text, retrievable to return it, filterable for exact-match $filter, sortable, facetable for counts, and key for the unique document ID.
Key encryption key
Optional Key Vault RSA key whose job is to wrap, or encrypt, a second encryption key such as the secret used by Azure Disk Encryption. Its versioned key URL identifies it.
Provider
The organisation that shares data in OpenSharing. Recipients also see a provider as a Unity Catalog securable, from which shares can be mounted as catalogs.