Azure Disk Encryption encrypts Windows and Linux VM disks. For Windows disks, it uses Bitlocker, and for Linux, dm-crypt is used, which are both industry standards. Azure Key Vault is used to manage the encryption keys, just like Azure Storage Encryption.
For all VM types, Azure Disk Encryption is available in all Azure regions and can be set using PowerShell. You can use the following commands to set the encryption:
Login-AzureRmAccount
If necessary, select the right subscription:
Select-AzureRmSubscription -SubscriptionId "********-****-****-****-***********"
We are using the Azure Key Vault to store the encryption keys, which we created earlier. We are using the VM that was created in the first chapter here as well (make sure that the VM is running; otherwise, you get an error running the script). Both are created in the same Resource Group...
