The Encryption toggle switch is missing in the vSphere Client

Products

• VMware vCenter Server

Issue/Introduction

When opening the [Edit Settings] > [VM Options] tab for a virtual machine, the [Encryption] section header is visible, but the [Encrypt VM] toggle switch is missing from the interface. Only other settings, such as [Encrypted vMotion], may be displayed within the section.

 

• Actual

• Expected

Environment

VMware vCenter Server 8.0

Cause

The vSphere Client hides this toggle switch unless the user has the necessary privileges to manage cryptographic operations and storage policies.

Resolution

To display and operate the [Encrypt VM] toggle switch, ensure the user has the following privileges.

Prerequisite
The user must have the privilege to modify virtual machine configurations (e.g., [Virtual machine] > [Change Configuration] > [Modify device settings]).

Required Privileges for Encryption Controls
Assign the following privileges to the user's role:

• [Cryptographic operations] > [Encrypt new]
• [Cryptographic operations] > [Decrypt]
• [VM storage policies] > [View VM storage policies]
• [VM storage policies] > [Update VM storage policies]

Additional Information

Even when the toggle is visible, encryption cannot be enabled if a valid Key Provider is not configured.