With the vSAN 6.2 release, VMware recommends HyTrust to further protect vSAN environments.

HyTrust DataControl is a complete cloud and virtualization encryption solution including both encryption and key control, and is available for both Windows and Linux. Initial installation takes just a few seconds and data is securely encrypted at rest and in motion from the point of install until the virtual machine is eventually securely retired.

Because the encryption software is part of the virtual machine, encryption travels with the VM from one physical host to another, or from private to public cloud and back again. Operationally DataControl is transparent, allowing encryption and rekeying “on-the-fly” with no need to reboot, dismount, or incur downtime.