6.7

Table Of Contents
n
To use the Guest OS lock option, verify that you have a Windows XP or later guest operating
system.
Procedure
1 Right-click a virtual machine in the inventory and select Edit Settings.
2 Click the VM Options tab, and expand VMware Remote Console Options.
3 (Optional) Select the Guest OS lock check box to lock the guest operating system when the last
remote user disconnects.
4 (Optional) Select Maximum number of sessions check box to limit the number of simultaneous
connections to this virtual machine, and enter a number.
5 Click OK.
Virtual Machine Encryption
Starting with vSphere 6.5, you can take advantage of virtual machine encryption. Encryption protects not
only your virtual machine but also virtual machine disks and other files. You set up a trusted connection
between vCenter Server and a key management server (KMS). vCenter Server can then retrieve keys
from the KMS as needed.
For detailed information about virtual machine encryption, see the vSphere Security documentation.
Encrypt an Existing Virtual Machine or Virtual Disk
You can encrypt an existing virtual machine or virtual disk by changing its storage policy. You can encrypt
virtual disks only for encrypted virtual machines.
This task describes how to encrypt an existing virtual machine or virtual disk using either the
vSphere Client (HTML5-based client) or the vSphere Web Client.
Prerequisites
n
Establish a trusted connection with the KMS and select a default KMS.
n
Create an encryption storage policy, or use the bundled sample, VM Encryption Policy.
n
Ensure that the virtual machine is powered off.
n
Verify that you have the required privileges:
n
Cryptographic operations.Encrypt new
n
If the host encryption mode is not Enabled, you also need Cryptographic operations.Register
host.
Procedure
1 Connect to vCenter Server by using either the vSphere Client (HTML5-based client) or the
vSphere Web Client.
vSphere Virtual Machine Administration
VMware, Inc. 172