vSAN Health Service - Data-at-rest encryption Health - CPU AES-NI is enabled on hosts

Products

• VMware vSAN

Issue/Introduction

This article explains the Data-at-rest encryption Health - CPU AES-NI is enabled on hosts check in the vSAN Health Service and provides details on why it might report an error or warning.

Environment

VMware vSAN (All Versions)

Resolution

Q: What does the 'Data-at-rest encryption Health - CPU AES-NI is enabled on hosts' check do?

This check verifies whether ESXi hosts in the vSAN cluster have CPU AES-NI feature enabled.

Q: What does it mean when it is in an error or warning state?

Unsuccessful test indicates that one or more hosts in the cluster do not support CPU AES-NI or have it disabled. As a result, the system might use the software encryption that is significantly slower than AES-NI.

Q: How does one troubleshoot and fix the error or warning state?

Check the health result to determine which hosts have AES-NI disabled. Then enable AES-NI in BIOS.