VMware Native Key Provider

[mathewdsa]

Hi all. I've seen there are 3 key providers including the Native one. Is the native key provider considered to be secure? What are some of the reasons you might want to have an external key provider and if you go with an external one, would you build it on a separate physical server? 

Secondly, when encrypting a VM, is the process CPU intensive? We will be looking at encrypting 500+ VMs. Is it recommended that we do these in smaller chunks? 

Thanks everyone. 

[maksym007 · Accepted solution]

For VMs scale like yours 500+ I would suggest configuring KMS or TPM Modules for ESXi.

But the second option might be a bit expensive and time-consuming.