Share via

AAD client/secret is not supported

Momo 21 Reputation points
2020-10-26T07:51:24.857+00:00

Hello,
i have some VM's encrypted via RSA HSM key. I want change it, but I receive this error:

"Azure Disk Encryption extension version '1.1 ' without AAD client/secret is not supported on VMs previously encrypted with AAD client/secret. "

How i could solve this issue?

Thanks

Azure Disk Encryption
Azure Disk Encryption
An Azure service for virtual machines (VMs) that helps address organizational security and compliance requirements by encrypting the VM boot and data disks with keys and policies that are controlled in Azure Key Vault.
162 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. deherman-MSFT 34,201 Reputation points Microsoft Employee
    2020-10-26T18:37:20.053+00:00

    @Momo
    Currently, there isn't a direct migration path for machines that were encrypted with an Azure AD app to encryption without an Azure AD app. Additionally, there isn't a direct path from encryption without an Azure AD app to encryption with an AD app.

    https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-faq#can-i-migrate-vms-that-were-encrypted-with-an-azure-ad-app-to-encryption-without-an-azure-ad-app

    -------------------------------

    Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

  2. Momo 21 Reputation points
    2020-11-03T16:15:51.99+00:00

    Hello,

    i want add another details from Overview and Activity Log:

    Linux (centos 7.8.2003)
    OpenLogic
    V1
    Eu West

    "type": "AzureDiskEncryptionForLinux",
    "typeHandlerVersion": "0.1"

    0 comments
  3. deherman-MSFT 34,201 Reputation points Microsoft Employee
    2020-11-03T18:09:25.293+00:00

    @Momo
    Apologies for the delay following up here and the inconvenience this may have caused. To rotate the CMK for your disk please try the following:

    Create a new version of the key in your key vault. If you are not sure which is your key vault you can find this on the Disk Encryption Set Key page.
    37204-new-key.png

    Navigate to your Disk Encryption Set, you can do this by clicking on SSE with CMK from the Disks Settings page.
    37140-disk-settings.png

    Under Settings>Key select change key. From here you can select the new key version that you created earlier.
    37177-disk-encryption-set.png

    You have now rotated the key and updated the Disk Encryption Set to use the new key.

    Let me know if you have issues or further question and I will be happy to help.

    -------------------------------

    Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.