Control encryption for virtual-machine workloads through Entrust KeyControl Virtual Machine Encryption, offered as KeyControl as a Service (KCAAS). This software-service offering addresses environments where the encryption function is associated with virtual machines. It places the requirement within the KeyControl platform and identifies virtual machine encryption as the workload scope. HTKH-VME-10-AAS is the ordering code for this KeyControl KCAAS virtual machine encryption offering. Select it when the required service is expressly named Virtual Machine Encryption and must align with the KeyControl service architecture. The designation concerns encryption for virtualized workloads, rather than a general-purpose network device, server component, cable, or rack-mounted appliance. Virtual machine encryption depends on controlled encryption keys and a defined key-control function. KeyControl provides the platform context for that function, while KCAAS identifies the service delivery designation used by this offering. That distinction matters when documenting encryption scope across a virtual infrastructure: this product addresses the virtual machine layer and should be evaluated as a KeyControl encryption service. No physical chassis dimensions, ports, power characteristics, or installed hardware form factor are associated with the offering.