Please tell me which is the right way of doing disk encryption in azure windows vm.

Question

question

Azurelearner-7037 asked Feb 18, '22 SumanthMarigowda-MSFT commented Mar 9, '22

Please tell me which is the right way of doing disk encryption in azure windows vm.

Could you please tell me is it a right way of doing disk encryption

From the vm -> Under disks section go to the disks -> open the disk -> Under settings, Encryption -> changing the encryption type and saving it. Is it a right way of doing disk encryption in azure windows vm?

Please tell me which is the right way of doing disk encryption in azure windows vm.

Also please tell me when we encrypt a disk while creating the vm, the temporary disk also get encrypted or do we need to encrypt the os disk, data disk and temporary disk separately.

azure-virtual-machines azure-disk-encryption

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-02-18T04:50:45.177Z

SumanthMarigowda-MSFT answered Feb 18, '22 SumanthMarigowda-MSFT commented Mar 9, '22

@Azurelearner-7037 Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

Azure Disk Encryption for Windows virtual machines (VMs) uses the BitLocker feature of Windows to provide full disk encryption of the OS disk and data disk. Additionally, it provides encryption of the temporary disk when the VolumeType parameter is All.

Create and encrypt a Windows virtual machine with the Azure portal

Azure Disk Encryption for Windows VMs

Enable encryption on an existing or running Windows VM Powershell or CLI

Please let us know if you have any further queries. I’m happy to assist you further.

Additional information: Please refer to this video for deep drive on Azure Disk Encryption

Please do not forget to and wherever the information provided helps you, this can be beneficial to other community members.

screenshot-2021-12-10-121802.png (1.4 KiB)

image.png (1.5 KiB)

· 4

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Azurelearner-7037 · Feb 18 at 05:10 AM

From the vm -> Under disks section go to the disks -> open the disk -> Under settings, Encryption -> changing the encryption type and saving it. Is it a right way of doing disk encryption in azure windows vm?

0 ·

SumanthMarigowda-MSFT Azurelearner-7037 · Feb 18 at 06:28 AM

@Azurelearner-7037 From the vm -> Under disks section go to the disks -> open the disk -> Under settings, Encryption -> changing the encryption type and saving Yes

To check on the encryption status of an IaaS VM, use the

 Get-AzVmDiskEncryptionStatus -ResourceGroupName 'MyVirtualMachineResourceGroup' -VMName 'MySecureVM'

Please do not forget to and 175620-image.png wherever the information provided helps you, this can be beneficial to other community members.

0 ·

image.png (30.4 KiB)

Azurelearner-7037 SumanthMarigowda-MSFT · Feb 18 at 07:18 AM

Thankyou

I have one doubt

After doing this step From the vm -> Under disks section go to the disks -> open the disk -> Under settings, Encryption -> changing the encryption type and saving it and saved it to the key vault. Is it a right way?

Another doubt is when we encrypt the disk using Disk encryption set ,did all the disks temporary , data and os disks will encrypted or do we need to encrypt the each disk seperately.?

0 ·

SumanthMarigowda-MSFT · Feb 18 at 11:52 AM

@Azurelearner-7037

Yes , For more information, please refer to this article
When you use encryptformatall option the temp disk gets encrypted as well

Please do not forget to and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

0 ·

screenshot-2021-12-10-121802.png (1.4 KiB)

question