An encryption key is required" during VR synchronization.

Products

• VMware vSphere ESXi

Issue/Introduction

This article provides workaround when encountered the issue of "An encryption key is required" during VR synchronization.

Symptoms:

VR synchronization failed by "An encryption key is required"

Environment

VMware vSphere ESXi 8.0.1
VMware vSphere ESXi 8.0.2
VMware vSphere ESXi 8.0.x

Cause

HA failover interrupted by vpxd unexpected exit which will bypass key usage_count logic.

Resolution

The fix is provided in 8.0.U2 release.

Workaround:
You can use the below workarounds:

1. Using below powerCLI cmdlet to unlock all the VMs in the VC:

       Get-VM|Where-Object {$_.ExtensionData.Runtime.CryptoState -eq 'locked'} | Unlock-VM
       This cmdlet can get all locked VM and unlock them together.

2. VC UI When we encounter the issue the VM goes to invalid state, VM(invalid),
go to VM Summary tab -> issues and alaram -> Virtual Machine Locked Alarm -> Actions -> Unlock VM.