vSAN Health Service - Encryption - CPU AES-NI Host Enablement Check

Products

• VMware vSAN

Issue/Introduction

This check verifies whether ESXi hosts in the vSAN cluster have CPU AES-NI feature enabled.

Unsuccessful test indicates that one or more hosts in the cluster do not support CPU AES-NI or have it disabled. As a result, the system might use the software encryption that is significantly slower than AES-NI.

Resolution

Check the health result to determine which hosts have AES-NI disabled. Then enable AES-NI in BIOS.

For more information on collecting VMware vSAN logs, see Collecting vSAN support logs and uploading to VMware (2072796).

Also, see:

• VMware vSAN documentation on The Cloud Platform Tech Zone
• VMware Ruby vSphere Console Command Reference for vSAN