VMware on Aruba Cloud > Virtual Private Cloud > The Virtual Private Cloud service > Enabling the KMS encryption service and connecting it to the Virtual Private Cloud

1.3 Enabling the KMS encryption service and connecting it to the Virtual Private Cloud

The KMS service allows you to encrypt individual items (vApps, VMs and Named Disks) or the entire vDC of your Virtual Private Cloud. Follow the main steps:

create a Virtual Private Cloud with encrypted storage;
create a KMS;
link the KMS service to the Virtual Private Cloud;
download the certificate and the private key generated using the KMS;
configure VMware Cloud Director choosing the management policies.