Link to home
Start Free TrialLog in
Avatar of epichero22
epichero22Flag for United States of America

asked on

VMWare Encryption Q's

Hello,


I have a virtual machine with two VMDK files.  When starting the VM, it asks for a password to launch it.  My questions are:

1. Are the full contents of these virtual disks encrypted or does it just apply to the disk file with the OS on it?
2. Is there a way to test the encryption?
3. I have another non-encrypted VM, can I extract the data from that disk file without launching the VM?


Thanks.
Avatar of Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Flag of United Kingdom of Great Britain and Northern Ireland image

Encryption is done within the OS, the same as a physical computer, it does not have anything to do with the hypervisor.

1. It depends on what you specified, when you used Bitlocker, and selected which disks to encrypt.

2. Attach the disk to another VM. Try and access the data.

3. Yes.

You copy copy VMDKs to Windows and/or Linux, and mount the VMDK, and extract the data.
Avatar of epichero22

ASKER

Here's the error message I got when I tried attaching my encrypted VMDK to another VM:

User generated image
Don't know if I'm good or if I should try another method for testing.
ASKER CERTIFIED SOLUTION
Avatar of Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I don't remember using Bitlocker, I simply used the built-in encryption for VMWare Workstation.  Not sure if that's the same thing.
Bitlocker is inside the OS - not relevant here.

You are using the Encryption option within VMware Workstation/Player - it's different!
BTW, do you know how the password decrypts the VMDK?  I'm wondering if it works like a pair of glasses you can see through with the correct decryption key.  Any wrong key will give you garbage, so not sure if this is correct.
try and mount the VMDK manually.

see here

http://www.running-system.com/how-to-mount-a-vmdk-file-under-windows/

This will provide you with the answer you are looking for, if you cannot mount the VMDK file, to extract the data, it's encrypted.
I wanted to know what kind of encryption it uses, what the bit rate is, and how the password unlocks the file.
VMware have never revealed what kind of encryption it uses, it has been reported it's  AES256.

But this has not been verified or audited.