I have a customer with a strange vmdk file. He deleted all snapshots but it still looks like there is one when you look at the datastore however there is no parent vmdk file. Even though this looks like a snapshot file could it in fact be just a standard vmdk file? See screen shot.
This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.