What is the default encrypted vSphere vMotion state for virtual machines that are not encrypted?

The default encrypted vSphere vMotion state for virtual machines that are not encrypted is opportunistic. In this mode, the system will automatically use encryption for vMotion if the virtual machine is being migrated to a destination that supports it and if the settings allow for encryption during the migration process. This approach provides flexibility, allowing encrypted vMotion to be leveraged without necessitating encryption for every virtual machine.

The opportunistic setting ensures that if both the source and destination hosts support encryption, the vMotion operation will proceed using encryption, providing additional security benefits when available. This design aims to optimize the use of available resources and enhance performance while also accommodating environments with a mixture of virtual machines, some of which may not require encryption.