December 2017
Beginner
598 pages
14h 7m
English
The vMotion encryption feature isn't simply an encrypting of the entire network channel for the vMotion traffic. There aren't certificates to manage.
The encryption happens on a per-VM level; when the VM is migrated, a randomly generated, one-time-use 256-bit key is generated by vCenter (it does not use the KMS). In addition, a 64-bit nonce (an arbitrary number used only once in a crypto operation) is also generated. The encryption key and nonce are packaged into the migration specification sent to both hosts. At that point, all the VM vMotion data is encrypted with both the key and the nonce, ensuring that communications can't be used to replay the data:
You can disable vMotion encryption, unless the ...
Read now
Unlock full access