A private cloud is using the iSCSI protocol for connection from storage to hypervisors. This connection is not encrypted currently, and the systems administrator is tasked with enabling on- the-fly…

PKI (Public Key Infrastructure) supplies the digital certificates and key management required to establish encrypted sessions for iSCSI traffic. By deploying PKI, the administrator can issue certificates to both iSCSI initiators and targets, enabling mutual authentication and TLS-based encryption of data in transit without requiring downtime or protocol replacement.

IPSec encrypts network-layer traffic but operates as a protocol suite rather than the certificate infrastructure needed to manage keys and identities for iSCSI session encryption.

HTTPS is an application-layer protocol for web traffic and is not applicable to encrypting block-level iSCSI storage connections.

LUN encryption protects data stored on a logical unit at rest but does not encrypt data as it travels between storage and hypervisors over the iSCSI protocol.