What is required to enable vSAN encryption on a VxRail cluster?

What is required to enable vSAN encryption on a VxRail cluster?
A . All-Flash system
External Key Management Server
B . Internal vCenter Server
Internal Key Management Server
C . External vCenter Server
External Key Management Server
D . Internal vCenter Server
External Key Management Server

Answer: C