Error : "The replication of virtual machines encrypted with Native Key Provider requires Secure LWD and Native Key Provider support. Secure LWD and Native Key Provider support are not available for this VM."

Products

• VMware Live Recovery

Issue/Introduction

Symptoms:

• After configuring vTPM on a virtual machine and on configuring it for replication following error is observed:
  
  "The replication of virtual machines encrypted with Native Key Provider requires Secure LWD and Native Key Provider support. Secure LWD and Native Key Provider support are not available for this VM.".
  
  

Environment

vSphere Replication 9.x

Cause

The cause of this issue is divided into two parts:

1. 1. Secure LWD --  Caused due to hbr-agent VIB is not installed on ESXi server that hosts the replicating VM.
      
      
   2. Native Key Provider support -- Caused due to different NKP ID at Source and Target vSphere environments.

Resolution

To resolve the issue, following actions are to be taken:

1. Enable Auto-deploy or manually install the hbr-agent VIB using steps:
   
   
   
   • • • Enable auto-deploy to allow install hbr-agent vib:
         
         SSH to VR appliance and run following commands:
         
           # /opt/vmware/hms/bin/hms-configtool -cmd reconfig -property hms-auto-install-hbragent-vib=true
     
  # service hms restart
         
         

       • Manually install VIB file:

         • Establish an SSH connection to the ESXi Server.
           
           
         • Temporarily deactivate the firewall on the ESXi host.
           
             # esxcli network firewall set --enabled false
           
           
         • Run the following command:
           
            # esxcli software vib install -v https://VR_APPLIANCE_IP:8043/vib/vmware-hbr-agent.vib
           
           
         • Enable the firewall on the ESXi host.
           
             # esxcli network firewall set --enabled true
           
           

   Ref : Configuration of an Encrypted VM Fails with an Error "The replication of encrypted virtual machines requires Secure LWD support. Secure LWD is not available for this VM"

   
   
   
2. For NKP issue, ensure the Source NKP configuration is exported and imported at the target site:
   
   Ref : Error on trying to add/replicate an encrypted VM : "Native Key Provider support is not available for this VM"
   
   
   
3. Configure replication for VM in question:
   
   In Site Recovery UI > Click on 'Replications' tab > Click on 'New'