Recent Posts

vSAN Encryption

Understanding vSAN Encryption – “Erase disks before use”


A few questions routinely come up when using “Erase disks before use” with vSAN Encryption.   What occurs when “Erase disks before use” is used? First, it is important to understand that this does not destroy active data. The rolling reformat process evacuates data from a disk group, to another disk group, before beginning the encryption Read more...

Understanding vSAN Encryption – Booting when vCenter is Unavailable


Since the introduction of vSAN Encryption in vSAN 6.6 some of the routine questions that get asked include: Do vSAN hosts get encryption key information from vCenter? What if vCenter is offline, is vSAN encryption impacted? What if vCenter is removed/replaced/not available, is vSAN impacted? The answers to these are pretty straightforward and easy to Read more...

Understanding vSAN Encryption – KMS Server Accessibility


vSAN 6.6 introduced data at rest encryption as a new feature that provides another choice (in addition to VM Encryption introduced in vSphere 6.5) for customers to secure data in vSphere. Despite the fact that these technologies work a bit differently (per datastore for vSAN Encryption or per VM for VM Encryption) these technologies still Read more...

Understanding the vSAN Witness Host – Traffic Tagging


With 2 Node and Stretched Cluster vSAN, a vSAN Witness Host is used. This can be a physical vSphere host or a  VMware provided virtual appliance. Using the vSAN Witness Appliance is easy, does not require any additional licensing, and has much of the configuration standardized (sizing, disks, tagged ports). A second VMkernel port (vmk1) Read more...

vSAN 6.6 Configuration Assist Makes Setup & Updating Easier


Whether setting up vSAN using Easy Install, manually, or through the vSphere Web Client, once the first host is setup, there are some necessary tasks to complete the configuration. Initial tasks required include setting up a VMkernel port with vSAN traffic, claiming disks, and more. Each of these can be accomplished relatively easily at through Read more...

Bootstrap the VCSA onto vSAN 6.6 with Easy Install


If vSAN is configured by vCenter, how do you deploy vCenter on top of vSAN? Sounds a bit like a chicken and egg scenario, huh? vSAN is part of a cluster configuration in vSphere. To create a cluster, a datacenter must first be present, and that must be part of a vCenter instance. At least that’s Read more...