One option to have encrypted date in the capacity tier is to enable capacity tier encryption.
Encryption for Capacity Tier - User Guide for VMware vSphere (veeam.com)
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/489e1d25-b7ed-48bd-98cd-89daee0d7e6d.png)
Question is: who exactly does this encryption?
I always assumed the gateway server is used for offloading. But helpcenter isn’t specific here.
Elsewhere helpcenter states that the encryption will be done “at source” - which in that case would be the repo extent server of the performance tier.
Who can provide evidence here?
Thanks,
Michael