@actyler1001: do you have any idea where the VTPM is stored and if it is stored encrypted or not?
I suspect it is just stored in plaintext on the VCSA storage, but this actually would vanish any encryption as the keys will be always stored in plaintext on the NAS/remote backips along with the encrypted VMs.
What do you think?