Enabling vSAN encryption
To enable vSAN encryption:
Navigate to the KMS cluster created in vCenter.
Right-click the cluster and select Settings.
The Configure tab is displayed.
Expand the vSAN section and click General.
Click Edit.
Edit vSan Settings window is displayed.
Enable Encryption and select the previously created KMS cluster.
Click OK.
The integration is now complete and you’re ready to encrypt virtual machines.
Once the integration is successful and the vSAN encryption starts in vSphere, you will be able to view the keys, secret data (managed objects) in the CipherTrust Manager.