VsanEncryptionHealthSummary
Encryption related information and Key Management Server connection health check result on the host.
The Key Management Server connection health check result indicates servers information and connection state from the host.
This structure may be used only with operations rendered under /vsan.
{
"_typeName": "string",
"hostname": "string",
"encryptionInfo": {
"_typeName": "string",
"enabled": false,
"kekId": "string",
"hostKeyId": "string",
"kmipServers": [
{
"_typeName": "string",
"clusterId": {
"_typeName": "string",
"id": "string"
},
"info": {
"_typeName": "string",
"name": "string",
"address": "string",
"port": 0,
"proxyAddress": "string",
"proxyPort": 0,
"reconnect": 0,
"protocol": "string",
"nbio": 0,
"timeout": 0,
"userName": "string"
},
"password": "string",
"defaultKeyType": "string",
"keySpec": {
"_typeName": "string"
}
}
],
"kmsServerCerts": [
"string"
],
"clientKey": "string",
"clientCert": "string",
"dekGenerationId": 0,
"changing": false,
"eraseDisksBeforeUse": false,
"wrappedDek": "string",
"dekId": "string",
"oldWrappedDek": "string",
"oldDekId": "string",
"kekVerifier": "string",
"dekVerifier": "string",
"oldDekVerifier": "string",
"iv": "string",
"syncing": false
},
"overallKmsHealth": "string",
"kmsHealth": [
{
"_typeName": "string",
"serverName": "string",
"health": "string",
"error": {
"_typeName": "string",
"faultCause": "MethodFault Object",
"faultMessage": [
{
"_typeName": "string",
"key": "string",
"arg": [
{
"_typeName": "string",
"key": "string",
"value": {
"_typeName": "string"
}
}
],
"message": "string"
}
]
},
"trustHealth": "string",
"certHealth": "string",
"certExpireDate": "string"
}
],
"encryptionIssues": [
"string"
],
"diskResults": [
{
"_typeName": "string",
"diskHealth": {
"_typeName": "string",
"name": "string",
"uuid": "string",
"inCmmds": false,
"inVsi": false,
"dedupScope": 0,
"formatVersion": 0,
"isAllFlash": 0,
"congestionValue": 0,
"congestionArea": "string",
"congestionHealth": "string",
"metadataHealth": "string",
"operationalHealthDescription": "string",
"operationalHealth": "string",
"dedupUsageHealth": "string",
"capacityHealth": "string",
"summaryHealth": "string",
"capacity": 0,
"usedCapacity": 0,
"reservedCapacity": 0,
"totalBytes": 0,
"freeBytes": 0,
"hashedBytes": 0,
"dedupedBytes": 0,
"scsiDisk": {
"_typeName": "string",
"deviceName": "string",
"deviceType": "string",
"key": "string",
"uuid": "string",
"descriptor": [
{
"_typeName": "string",
"quality": "string",
"id": "string"
}
],
"canonicalName": "string",
"displayName": "string",
"lunType": "string",
"vendor": "string",
"model": "string",
"revision": "string",
"scsiLevel": 0,
"serialNumber": "string",
"durableName": {
"_typeName": "string",
"namespace": "string",
"namespaceId": 0,
"data": [
0
]
},
"alternateName": [
{
"_typeName": "string",
"namespace": "string",
"namespaceId": 0,
"data": [
0
]
}
],
"standardInquiry": [
0
],
"queueDepth": 0,
"operationalState": [
"string"
],
"capabilities": {
"_typeName": "string",
"updateDisplayNameSupported": false
},
"vStorageSupport": "string",
"protocolEndpoint": false,
"perenniallyReserved": false,
"clusteredVmdkSupported": false,
"applicationProtocol": "string",
"dispersedNs": false,
"deviceReservation": "string",
"capacity": {
"_typeName": "string",
"blockSize": 0,
"block": 0
},
"devicePath": "string",
"ssd": false,
"localDisk": false,
"physicalLocation": [
"string"
],
"emulatedDIXDIFEnabled": false,
"vsanDiskInfo": {
"_typeName": "string",
"vsanUuid": "string",
"formatVersion": 0
},
"scsiDiskType": "string",
"usedByMemoryTiering": false
},
"usedComponents": 0,
"maxComponents": 0,
"compLimitHealth": "string",
"encryptionEnabled": false,
"kmsProviderId": "string",
"kekId": "string",
"dekGenerationId": 0,
"encryptedUnlocked": false,
"rebalanceResult": {
"_typeName": "string",
"status": "string",
"bytesMoving": 0,
"remainingBytesToMove": 0,
"diskUsage": "number",
"maxDiskUsage": "number",
"minDiskUsage": "number",
"avgDiskUsage": "number",
"diskCompUsage": "number",
"maxDiskCompUsage": "number",
"minDiskCompUsage": "number",
"avgDiskCompUsage": "number"
},
"dekId": "string",
"kekVerifierHealth": false,
"dekVerifierHealth": false,
"logicalCapacity": 0,
"logicalCapacityUsed": 0,
"logicalCapacityHealth": "string",
"vsanDiskGroupUuid": "string",
"dgLayoutIssue": false,
"usedMetadataComponents": 0,
"maxMetadataComponents": 0,
"pendingClusterDekId": "string",
"dmekVerifierHealth": false
},
"encryptionIssues": [
"string"
]
}
],
"error": {
"_typeName": "string",
"faultCause": "MethodFault Object",
"faultMessage": [
{
"_typeName": "string",
"key": "string",
"arg": [
{
"_typeName": "string",
"key": "string",
"value": {
"_typeName": "string"
}
}
],
"message": "string"
}
]
},
"aesniEnabled": false,
"inconsistentlyEncryptedObjectCount": 0,
"hostEncryptionDekId": "string",
"kekVerifierHealth": false,
"dekVerifierHealth": false
}Hostname/IP of host which runs the encryption health check.
Encryption information on the host, including encryption enablement state, Key Encryption Key id, Data Encryption generation number, servers certificate thumbprints, client certificate thumbprint, client key hash, Key Management Servers information.
The encryption information on host will be used for checking consistency with the cluster configuration on vCenter side.
The overall KMS cluster health status on the ESXi host.
All of possible value are "green", "red" and "yellow". "green": If all KMS health status are "green". "red": If all KMS health status is "red". "yellow": If at least one KMS health status is "green".
Key Management Servers connection health check result on the host.
Host inconsistent encryption issues against cluster configuration.
This field can only be set from vCenter side.
See also VsanEncryptionIssueEnum.
Disk encryption health results on the host.
This field can only be set from vCenter side. See VsanDiskEncryptionHealth.
If error is set, it means that collection of encryption information failed on this host.
The host CPU AES-NI instruction set enabled state.
If AES-NI was disabled, the software encryption would be significantly slower than AES-NI.
The number of encrypted objects whose encryption key is inconsistent with the host encryption configuration, 0 means all objects are consistent.
Per host object encryption dek id.
The host Kek Verifier health state, 'True' means the host kek verifier has not changed and is healthy, 'False' means the the host kek verifier has changed and is not healthy
The host Dek Verifier health state, 'True' means the host dek verifier has not changed and is healthy, 'False' means the the host dek verifier has changed and is not healthy