There are different possible options to store your data securely which are as follows:
- Encryption at storage physical level: This is done by using self-encrypting drives (SED) using full disk encryption, also known as hardware-based full-disk encryption (FDE). Opal Storage Specification is a set of specifications for SED developed by the Trusted Computing Group. But those types of disks are quite costly and also require controllers or storage that support this feature.
- Encryption at storage logic level: This is done by using vSAN encryption that uses an AES 256 cipher and eliminates the extra cost, limitations, and complexity associated with purchasing and maintaining self-encrypting drives. vSAN datastore encryption ...