Windows VM shows as encrypted even when encryption was not enabled

Products

• VMware vSphere ESXi

Issue/Introduction

Windows VM is encrypted when deployed from Aria Automation.

Environment

VMware vSphere ESXi 8.x

Resolution

• To run Windows 11 or later in a virtual machine, the machine needs to have a vTPM.
• vTPM VMs require encryption, so if this VM are deployed it is required to have encryption enabled.
• Adding vTPM automatically encrypts the VM.
• Even if vTPM is added to an unencrypted VM, it will be automatically and discreetly encrypted. If vTPM is added during the initial deployment, the VM will end up being an encrypted VM.
  • Note: On VMware Workstation, adding a vTPM fails when the VM is not already encrypted.

 

Additional Information

vSphere Virtual TPM (vTPM) Questions & Answers