Encryption at-rest is a form of encryption that protects data when it is stored in storage systems. Data is encrypted before being written to the storage medium and must be decrypted before it can be used. Encryption at-rest is always enabled by default. Data at-rest is protected by symmetric encryption (AES) with a 256-bit key.
In addition, you can encrypt one or more elements of your vDC using your own
encryption keys managed by
Aruba Cloud KMS.