If you intend to use this VM with a BoundaryControl-enabled Cloud VM Set, you must install the latest version of VMware Tools on the VM. For all other VMs, installing VMware Tools is recommended but not required.

Cryptographic Security Platform Vault creates a 10 MB private RAW partition for storing metadata the first time you encrypt a partition on a disk. This metadata is required for all subsequent client operations on the encrypted drives. Back it up with the drives whenever you take backups. If the metadata partition is inadvertently removed, the encrypted drives will become inaccessible because the data encryption keys will not be found.

Cryptographic Security Platform Vault first attempts to create the private partition from unallocated space. If the disk does not have at least 10 MB of unallocated space, it automatically shrinks the data partition to create space for the private RAW partition. On large partitions, this can be very time-consuming. If the Virtual Disk does not have 10 MB of unallocated space, we recommend using your Hypervisor tools to extend the virtual disk to ensure Cryptographic Security Platform Vault can create the private partition from unallocated space.

Make sure that the disk contains no more than two partitions, excluding the Microsoft Reserved Partition and the Cryptographic Security Platform Vault private partition.

Cryptographic Security Platform Vault only supports encrypting either two data partitions or encrypting the root drive partition and one data partition. You cannot encrypt the boot drive and multiple data partitions.

Note: Only primary partitions can be encrypted. Logical or extended partitions are not supported.

If the disk contains a hidden Snapshot partition, remove that snapshot partition as described in Detecting and Removing a Windows Snapshot Partition.