copyVirtualDisk

– If the source disk is encrypted, its copied disk is encrypted with the same key, regardless of the

crypto

spec. When calling

copyVirtualDisk_Task

on vCenter Server, do not specify the

destSpec

parameter, which throws a Not Implemented fault;

destSpec

is supported only on ESXi hosts.

createVirtualDisk

– Given a valid

crypto

spec, this task directly creates an encrypted virtual disk.

moveVirtualDisk

– An encrypted virtual disk cannot be moved to an unencrypted virtual machine.

createChildDisk

– The child disk of an encrypted disk remains encrypted with the same key.

reparentDisks

– Encrypted child disk cannot be reparented to a new disk that is not in the same disk chain.