Server 2016 Host Encrypted With Bitlocker

[synergyit]

Hi All,

Apologies if this has been answered elsewhere I have looked

I have a Windows Server 2016 host running Hyper-V role, the whole host is encrypted with bitlocker (Hardware TPM Module), the VM's are not using VM bitlocker but the VHDX's disks are by definition encrypted as the whole host is encrypted.

My question is: If I backup just one Hyper-V gues t and need to restore it a different host how would Veeam handle this, would it restore to the new host without issue? Also how would the new host "see" the encrypted VHDX.

Or is it better to encrypt the individual VM's from Hyper-V does Veeam cope with this better?

Any adive would be greatly appreciated

Many Thanks

Tom

[nmdange]

With the host encrypted, the backups will be un-encrypted because the bitlocker drive is unlocked when the host boots. So restoring to another host will be fine. If you wanted to use a virtual TPM and encrypt within the VMs, you would want to implement the Host Guardian Service to hold the encryption keys so the VMs can be unencrypted when they are booted on another host.