What is a difference between vSAN Data-In-Transit Encryption and vSAN Data-At-Rest-Encryption?

Data-In-Transit Encryption: Encrypts traffic between VMs and the VxRail nodes

Data-At-Rest Encryption: Encrypts traffic between VxRail nodes only

Data-In-Transit Encryption: Does not require a Key Management Server

Data-At-Rest Encryption: Requires a Key Management Server

Data-In-Transit Encryption: Key Management Server must reside on the vSAN cluster

Data-At-Rest Encryption: Key Management Server can reside on the vSAN cluster

Data-In-Transit Encryption: Addresses fear of media theft

Data-At-Rest Encryption: Addresses fear of rogue administrators