Facing error while deploying VSAN cluster

Products

• VMware vSAN
• VMware vCenter Server 8.0

Issue/Introduction

Getting error, "There was an issue generating keys" when attempting to enable "Data-At-Rest" encryption on vSAN cluster

Environment

vCenter 8.0

ESXi 8.0

Cause

Port 5696 is not open from the hosts to the KMS server.

 

The following command did not return a response from the KMS server when ran from one of the hosts in the vSAN cluster.

 

nc -z <IP Address of KMS Server> 5696

 

The response should have shown the following output:

 

nc -z <IP Address of KMS Server> 5696

 

"Connection to <IP Address of KMS Server> 5696 port [tcp/http] succeeded!"

 

Resolution

Open port 5696 so the ESXi hosts can communicate with the KMS server/s.