IBM Cloud Docs
VMware Regulated Workloads overview

VMware Regulated Workloads overview

The VMware® Regulated Workloads offering includes a secure-by-default architecture that follows the IBM® unique policy controls framework. It also includes continuous compliance monitoring and the highest level of data encryption FIPS 140-2 Level 4.

Review the following specifications before you begin.

  • VMware Regulated Workloads is only available for single-zone topology.
  • VMware Regulated Workloads are based on VMware NSX-T™ and VMware vSphere® 7.
  • Hyper Protect Crypto Services, KMIP for VMware, and Direct Link Dedicated are required for VMware Regulated Workloads. Ensure that you order these services before you start your VMware Regulated Workloads order.
  • Some of the services require configuration setup. Review each service and ensure that you configure its settings properly, as indicated.
  • The Private network only option is available for all clusters. The Public and private network option is available only for the gateway cluster.

Options not available for VMware Regulated Workloads

The following options or settings are not available for VMware Regulated Workloads:

  • Local disks
  • High performance with Intel® Optane
  • vSAN™ deduplication and compression
  • Selection of existing VLANs. Only the option to order new VLANs is available.
  • Single public Windows® VSI for Active Directory™ DNS configuration. Only the option to order two highly available dedicated Windows server virtual machines (VMs) on the management cluster is available.