# Data Object - VsanEncryptionHealthSummary(vim.host.VsanEncryptionHealthSummary)

Property of
  VsanClusterEncryptionHealthSummary
Returned by
  VsanHostQueryEncryptionHealthSummary
Extends
  DynamicData
See also
  LocalizedMethodFault, VsanDiskEncryptionHealth, VsanHostEncryptionInfo, VsanKmsHealth
Since
  vSAN API 6.6

## Data Object Description

Encryption related information and Key Management Server connection health check result on the host. The Key Management Server connection health check result indicates servers information and connection state from the host.

Properties

Name | Type | Description
--- | --- | ---
aesniEnabled* | xsd:boolean | The host CPU AES-NI instruction set enabled state. If AES-NI was disabled, the software encryption would be significantly slower than AES-NI.
dekVerifierHealth* | xsd:boolean | The host Dek Verifier health state, 'True' means the host dek verifier has not changed and is healthy, 'False' means the the host dek verifier has changed and is not healthy Since vSAN API 8.0.0.1
diskResults* | VsanDiskEncryptionHealth[] | Disk encryption health results on the host. This field can only be set from vCenter side. See VsanDiskEncryptionHealth.
encryptionInfo* | VsanHostEncryptionInfo | Encryption information on the host, including encryption enablement state, Key Encryption Key id, Data Encryption generation number, servers certificate thumbprints, client certificate thumbprint, client key hash, Key Management Servers information. The encryption information on host will be used for checking consistency with the cluster configuration on vCenter side.
encryptionIssues* | xsd:string[] | Host inconsistent encryption issues against cluster configuration. This field can only be set from vCenter side. See VsanEncryptionIssue
error* | LocalizedMethodFault | If error is set, it means that collection of encryption information failed on this host.
hostEncryptionDekId* | xsd:string | Per host object encryption dek id. Since vSAN API 8.0.0.1
hostname* | xsd:string | Hostname/IP of host which runs the encryption health check.
inconsistentlyEncryptedObjectCount* | xsd:long | The number of encrypted objects whose encryption key is inconsistent with the host encryption configuration, 0 means all objects are consistent. Since vSAN API 8.0.0.1
kekVerifierHealth* | xsd:boolean | The host Kek Verifier health state, 'True' means the host kek verifier has not changed and is healthy, 'False' means the the host kek verifier has changed and is not healthy Since vSAN API 8.0.0.1
kmsHealth* | VsanKmsHealth[] | Key Management Servers connection health check result on the host.
overallKmsHealth | xsd:string | The overall KMS cluster health status on the ESXi host. All of possible value are "green", "red" and "yellow". "green": If all KMS health status are "green". "red": If all KMS health status is "red". "yellow": If at least one KMS health status is "green".
Properties inherited from DynamicData
None

*Need not be set
Show WSDL type definition
<complexType xmlns="http://www.w3.org/2001/XMLSchema" xmlns:vsan="urn:vsan" name="VsanEncryptionHealthSummary"> <complexContent> <extension base="vsan:DynamicData"> <sequence> <element name="hostname" type="xsd:string" minOccurs="0"/> <element name="encryptionInfo" type="vsan:VsanHostEncryptionInfo" minOccurs="0"/> <element name="overallKmsHealth" type="xsd:string"/> <element name="kmsHealth" type="vsan:VsanKmsHealth" minOccurs="0" maxOccurs="unbounded"/> <element name="encryptionIssues" type="xsd:string" minOccurs="0" maxOccurs="unbounded"/> <element name="diskResults" type="vsan:VsanDiskEncryptionHealth" minOccurs="0" maxOccurs="unbounded"/> <element name="error" type="vsan:LocalizedMethodFault" minOccurs="0"/> <element name="aesniEnabled" type="xsd:boolean" minOccurs="0"/> <element name="inconsistentlyEncryptedObjectCount" type="xsd:long" minOccurs="0"/> <element name="hostEncryptionDekId" type="xsd:string" minOccurs="0"/> <element name="kekVerifierHealth" type="xsd:boolean" minOccurs="0"/> <element name="dekVerifierHealth" type="xsd:boolean" minOccurs="0"/> </sequence> </extension> </complexContent> </complexType>