vSAN cache disk has encryption disabled, while its vSAN cluster has encryption enabled. Alert for vSAN Witness node in Aria Operations

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

The purpose of this article is to demonstrate how to create a new policy with the encryption alert disabled and apply that new policy to the vSAN Witness node disks.

Symptoms:

• VMware vCenter and associated encrypted vSAN is integrated with Aria Operations
• vSAN Witness node will generate an alert in Aria Operations similar to:
  • vSAN cache disk has encryption disabled, while its vSAN cluster has encryption enabled.

Environment

VMware vRealize Operations 8.6.x
VMware Aria Operations 8.12.x
VMware vRealize Operations 8.10.x

Cause

• The out of the box alerts in Aria Operations cannot distinguish between vSAN and vSAN Witness nodes.
• If encryption is enabled in vSAN there is no mechanism to enable encryption in vSAN Witness

Resolution

This is a known limitation, Aria Operations is unable to distinguish between vSAN and vSAN Witness nodes.

Workaround:

• In the Aria Operations UI click on Configure - Policies and Create a new policy, selecting to inherit from the vSphere solutions default policy.
• Edit the new policy and deactivate the vSAN cache disk alert, save the changes.

• In Environment - Object Browser locate the vSAN Witness node and assign the new policy to its disks.