Disk Encryption in Azure

Encrypting Azure disks ensures that unattended and unauthorized access to the disks is prevented by encrypting the data. This can be done at both the infrastructure level, through Server-Side Encryption (SSE), and at the Operating System (OS) level, through Azure Disk Encryption (ADE).

SSE is a technology used to encrypt your persisted cloud data, also referred to as encryption at host. SSE protects your data stored in the cloud by encrypting it.

ADE provides a mechanism to safeguard and protect your data. It is zone resilient just like Azure VMs. In Windows OS, the encryption is done through BitLocker with the option to store the encrypting key in Key Vault. It is the same for Linux, with the utility for encryption being DM-Crypt.

In the following exercise, you are going to explore how to encrypt an Azure Windows VM.

Exercise 13.8: Configuring ADE

You will now walk through the steps involved in activating ADE. This will be performed on a Windows...