How to enable Azure Disk Encryption from Azure Portal and using PowerShell commands

Опубликовано: 06 Октябрь 2024
на канале: Cloud Security Training & Consulting

1,281

How to enable Azure Disk Encryption from Azure Portal and using PowerShell commands
You will need a Keyvault
Either do it from Portal or use the following sample powershell command:

$ResourceGroupName ='ADE'
$vmName = 'WIN21'
$KeyVaultName = 'EncryptionVault9'
$KeyVault = Get-AzKeyVault -VaultName $KeyVaultName -ResourceGroupName $ResourceGroupName
$diskEncryptionKeyVaultUrl = $KeyVault.VaultUri
$KeyVaultResourceId = $KeyVault.ResourceId

Set-AzVMDiskEncryptionExtension `
-ResourceGroupName $ResourceGroupName `
-VMName $vmName `
-DiskEncryptionKeyVaultUrl $diskEncryptionKeyVaultUrl `
-DiskEncryptionKeyVaultId $KeyVaultResourceId