Host Vsan Health System Vsan Host Query Encryption Health Summary
Query the encryption health summary on the host.
Required privileges: System.Read
The unique identifier for the managed object to which the method attaches; the serialized managed object reference for a request has the form moType/moId
, in this case HostVsanHealthSystem/{moId}
.
The vSphere release schema. The current specification covers vSphere 9.0.0.0 APIs.
The encryption health summary result
"VsanEncryptionHealthSummary Object"
Hostname/IP of host which runs the encryption health check.
Encryption information on the host, including encryption enablement state, Key Encryption Key id, Data Encryption generation number, servers certificate thumbprints, client certificate thumbprint, client key hash, Key Management Servers information.
The encryption information on host will be used for checking consistency with the cluster configuration on vCenter side.
The overall KMS cluster health status on the ESXi host.
All of possible value are "green", "red" and "yellow". "green": If all KMS health status are "green". "red": If all KMS health status is "red". "yellow": If at least one KMS health status is "green".
Key Management Servers connection health check result on the host.
Host inconsistent encryption issues against cluster configuration.
This field can only be set from vCenter side.
See also VsanEncryptionIssueEnum.
Disk encryption health results on the host.
This field can only be set from vCenter side. See VsanDiskEncryptionHealth.
If error is set, it means that collection of encryption information failed on this host.
The host CPU AES-NI instruction set enabled state.
If AES-NI was disabled, the software encryption would be significantly slower than AES-NI.
The number of encrypted objects whose encryption key is inconsistent with the host encryption configuration, 0 means all objects are consistent.
Per host object encryption dek id.
The host Kek Verifier health state, 'True' means the host kek verifier has not changed and is healthy, 'False' means the the host kek verifier has changed and is not healthy
The host Dek Verifier health state, 'True' means the host dek verifier has not changed and is healthy, 'False' means the the host dek verifier has changed and is not healthy
curl -X POST -H 'Authorization: <value>' https://{api_host}/sdk/vim25/{release}/vsan/HostVsanHealthSystem/{moId}/VsanHostQueryEncryptionHealthSummary