October 2018
Beginner to intermediate
390 pages
9h 9m
English
A similar thing can be applied to Azure VMs. Disks are encrypted by default and data is protected at rest. But as mentioned, when a disk is exported or downloaded, it's no longer protected. Using Key Vault, we can set additional encryption to our Azure VM disks and protect data in any situation. If we open disks in any of our Azure VMs, we can see that the disk is not encrypted, as shown:

To enable disk encryption, first we must enable the Key Vault for disk encryption:
Set-AzureRmKeyVaultAccessPolicy -VaultName 'PacktKV' -ResourceGroupName 'PacktKeyVault' -EnabledForDiskEncryption
Now we can enable disk encryption:
$VMRG ...
Read now
Unlock full access