# Data Object - VsanHostCreateNativeKeyProviderSpec(vim.vsan.host.CreateNativeKeyProviderSpec)

Property of
  VsanPrepareVsanForVcsaSpec, VsanVcPostDeployConfigSpec
Extends
  DynamicData
Since
  vSAN API 8.0.0.1

## Data Object Description

Specifies parameters needed to create native key provider.

Properties

Name | Type | Description
--- | --- | ---
keyDerivationKey* | xsd:string | Key used to derive data encryption keys. Base64 encoded. If unset, the key derivation key will be generated automatically.
keyId* | xsd:string | Key identifier for the provider. The key identifier is required to be a 128-bit UUID represented as a hexadecimal string in "12345678-abcd-1234-cdef-123456789abc" format. If unset, the key identifier will be generated automatically.
provider | xsd:string | Provider identifier. A unique string provided by the client.
tpmRequired* | xsd:boolean | TPM Required or Not. When TPM is required, user won't be able to create native key provider on hosts without TPM. If unset, there's no TPM constraints on host.
Properties inherited from DynamicData
None

*Need not be set
Show WSDL type definition
<complexType xmlns="http://www.w3.org/2001/XMLSchema" xmlns:vsan="urn:vsan" name="VsanHostCreateNativeKeyProviderSpec"> <complexContent> <extension base="vsan:DynamicData"> <sequence> <element name="provider" type="xsd:string"/> <element name="keyId" type="xsd:string" minOccurs="0"/> <element name="keyDerivationKey" type="xsd:string" minOccurs="0"/> <element name="tpmRequired" type="xsd:boolean" minOccurs="0"/> </sequence> </extension> </complexContent> </complexType>