From link https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-8D7D09AC-8579-4A33-9449-8E8BA49A3003.html
The key that vCenter Server retrieves from the KMS unlocks an encrypted bundle in the VMX file that contains internal keys and other secrets
However vmdk also contains KEK. Question is a bit ambiguous. If u plug that disk to a new VM u should be able to open the disk as long as u can get access to the KMS, hence config is also on the vmdk file
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
rajavalas
Highly Voted 5 years, 7 months agoAolivera
Most Recent 4 years, 10 months agoJuanPC
4 years, 11 months agoaymanmonem
5 years, 1 month ago