You can now choose to use shielded instances as ESXi hosts in your SDDC.

When you create an SDDC, you can choose to use shielded instances for ESXi hosts. Shielded instances harden the firmware security on ESXi hosts to defend against malicious boot level software. Shielded instances for VMware Solution provide the following features:

• Secure boot checks the signature of each piece of boot software, including firmware drivers, EFI applications and the operating system. If the signature is valid, the server boots and the firmware gives control to the operating system. If the signature is not found in the valid signatures database, the system will not boot. See the VMware Secure Boot Documentation for more information.
• Trusted Platform Module (TPM) is a computer chip that can securely store artifacts like signatures, certificates and encryption keys used to authenticate the platform. See the VMware TPM Documentation for more information.