Description

Enabling virtual machine disk encryption increases the security of virtual machine disks. The encryption protection of images and snapshots can be achieved by encrypting the virtual machine disks during the detection of equal protection.

Precautions

1. Virtual machine disk encryption supports AES 256 symmetric encryption algorithm.
2. One encryption option per virtual machine. After enabling the encryption, the entire virtual machine is encrypted.
3. One virtual machine has one key. After encryption, all disks have the same key.
4. After virtual machine disk encryption is enabled, it cannot be canceled.
5. After the virtual machine disk is encrypted, it is irreversible.
6. The encrypted disk virtual machine None method for disk encryption can be used to export, clone, and deploy templates.
7. The platform encryption function adopts a pure soft encryption method. Customers do not need to purchase additional hardware, such as encryption cards and encryption machines.
8. Key management functions are all implemented in the platform by simulating KMS.
9. Encryption of a virtual machine is performed when it is created or in the shutdown state. To encrypt a virtual machine with an existing service, you must do it during non-business hours.
10. After the virtual machine is encrypted, the disk data read and write needs to be encrypted and decrypted, which has a certain performance consumption. It is necessary to turn on the virtual machine encryption function carefully.

Prerequisites

None.

Steps

1. Navigate to System > Advanced to view the Encryption Algorithm.

2. Open the Compute page and make sure that the virtual machine to be encrypted is powered off.
3. Click More > More > Encrypt VM to encrypt the virtual machine.
4. After complete encryption, the Compute page will display a flag that the virtual machine has been encrypted.