SCP and HCI support the creation of encrypted VMs. The encryption keys for encrypted VMs are managed by SCP and HCI and cannot be exported. As a result, an encrypted VM cannot be recovered by creating a new one. Recovery must be performed by overwriting the original VM configuration. To determine whether a VM is encrypted, you can call the OpenAPI for querying VM snapshot details.

SCP: GET /janus/20240725/servers/{server_id}/snapshots/{snapshot_id}

HCI: GET /hci/vt/api/v1/snapshots/{id}

If the return value for the vmconf.advanced_option.encrypted field is true, the VM disk is encrypted.