You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I got bitten by this after a recent deployment where the keys were not recorded and a node failed a couple of weeks after. Recovery would have been possible and faster had i recorded all the keys.
The text was updated successfully, but these errors were encountered:
I'll get greedy by asking to record the Key Persistence status too :-)
This is used to set it:
Key persistence is not enabled by default when using 3rd party KMS. This can be enabled via the following esxcli commands:
esxcli system settings encryption set --mode=TPM
esxcli system security keypersistence enable
I'll look into adding the TPM information, however an as-built does not set or change a configuration, it simply documents and records the current configuration.
Since TPM should now be implemented for all deployments, can this detail be added to the report?
Link with example code:
https://vm.knutsson.it/2021/07/powercli-tpm-encryption-recovery-key-backup/
I got bitten by this after a recent deployment where the keys were not recorded and a node failed a couple of weeks after. Recovery would have been possible and faster had i recorded all the keys.
The text was updated successfully, but these errors were encountered: