Encrypt & Decrypt VM Storage

Modern infrastructure protection has to cover more than a host firewall. Sovereign Data requirements increasingly ask where data is stored, who can access it, and what remains exposed when compute moves to another site or cloud. Moving a workload to remote infrastructure can expand the trust boundary to the platform that hosts it; STRATUM storage encryption keeps the VM disk image protected at rest.

For a broader sovereign-data posture, STRATUM can also protect the VM runtime in memory where Encrypted Runtime is enabled and supported, while the always-on encrypted Continuum protects data in motion. That gives the operator controls across data at rest, data in use, and data in motion. Start an encrypt or decrypt action only when the image is in the required state for conversion, and let the conversion finish before starting dependent workloads.

The selected VM image reports the requested encrypted or decrypted state after conversion completes.