Some vSphere infrastructures are located strictly on-premise, where the local IT department has full control over the entire infrastructure, but maintaining a hybrid infrastructure can become a security challenge.

Every time your data leaves your organization, for example, if part of the infrastructure is located in an external data center, you should always encrypt such data since it is the most valuable asset of every company.

VMware vSphere can be leveraged to encrypt data in different levels:

• Encryption at rest: Data is encrypted on the storage infrastructure, in the other words, where it resides
• Encryption during transit: Data is encrypted when transmitted over an unsecured channel