Enabling storage encryption by using ADE
When it comes to Azure VMs running as IaaS in Microsoft Azure, storage-level protection is ultimately provided in the form of encryption on the VM disk files, and can be handled through ADE using BitLocker Drive Encryption for Windows systems and DM-Crypt for Linux-based systems. ADE can automatically encrypt the OS disk, any data disks, and the temporary disks and will support both managed and unmanaged disks.
A few scenarios where you can utilize ADE are as follows:
- Enabling encryption on existing Azure VMs that are already in Azure
- Enabling encryption on new Azure VMs that were created from Azure Marketplace pre-created images
- Enabling encryption on new Azure VMs that were established from a customer-encrypted virtual hard drive file using existing encryption keys
In addition, there are key requirements that need to be met for ADE regarding other OSes, networking, memory, VM generation, Group Policy, and encryption...
