Hi,

AFAIK, According to recent documentation the native key provider and the vTPM functionality is included in all (the paid one, because you need vCenter to configure a cluster) vSphere editions. Please have a look:

https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-54B9FBA2-FDB1-400...
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-6F811A7A-D58B-47B...

In my enviromnent I recently deployed and ESXi HOST (7.0U3D) with corrispondig vCenter VCSA (7.0U3D) "essential" licensed and I did not find issue setting the "native key provider", a cluster and then adding a vTPM to a purpose build virtual machine. Of course I just want to test it so your mileage may vary

Hope this help,

Regards,
Ferdinando