In this article we are going to learn that how we can encrypt an Azure
Virtual Machine .
Azure Disk Encryption helps protect and safeguard your data to meet your
organizational security and compliance commitments. It uses the Bitlocker feature of Windows to provide
volume encryption for the OS and data disks of Azure virtual machines (VMs),
and is integrated with Azure Key Vault to help
you control and manage the disk encryption keys and secrets.
Create an Azure Key Vault
Open Azure portal.
https://portal.azure.com/
Search Key Vaults -> Add New
Image 1.
Select your subscription, RG, Name, region and pricing
tier.
Image 2.
Select access policy.
Image 3.
Select Review + Create
Image 4.
Image 5.
Enter key name.
Image 6.
Key has been created.
Image 7.
Now view your Virtual machine and one pint to remember
ie: we can only apply encryption to standard and above means DS1 configuration . Below is my
Virtual Machine:
Image 8.
Click on Disks.
Image 9.
Encryption is not enable. To Enable Encryption we can use
Power Shell command or UI option.
Click on Encryption from Top listed Menu.
Image 10.
Image 11.
Image 12.
Image 13.
It will take some to make changes effective.
Image 14.
If there is any issue to enable Encryption from UI route
then I will suggest please go with power shell command. Below is the reference
for the same.
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-cli-quickstart
Happy Learning Azure J