Disk encryption with customer key
Hello guys, I've followed this article (https://learn.microsoft.com/en-us/azure/virtual-machines/disks-enable-customer-managed-keys-portal) to configure KeyVault to store customer key and apply this CMK to VM OS disk and it would appear that the…
How can I migrate a Linux OS disk encrypted with Azure Disk Encryption from one tenant to another tenant?
We have a Linux virtual machine in Tenant A with its OS disk encrypted using Azure Disk Encryption and a Key Vault in the same tenant. Our goal is to migrate this virtual machine from Tenant A to Tenant B. However, decrypting the Linux OS disk is not a…
How can I unlock an AIX encrypted volume with a key stored on Azure Key Vault?
Hello, I'd like to know if it's possible to manage AIX (and IBMi) encryption keys via Azure Key Vault. Is it possible with AIX hdcryptmgr or keysvrmgr? I'm having trouble finding documentation on how to do this. I did find linux documentation, but it…
Encryption at host for Azure VM's
I want to know if encryption at host is supported for all disk type or just for premium SSD and ultra disks? does setting up encryption at host also need a key vault and disk encryption sets? are there any cost involved? I know it does not use vm cpu…
Double Encryption of the storage account after creation
Hi, Is it possible to enable the double encryption of the infrastructure (Storage account) after it has been created already) we don't want to delete files but just implement a double encryption on the already created storage
Enabling Encryption at Host on Current VMs
Hi, I enabled encryption at host on my linux VMs by first enabling the feature at subscription level, then stopping the VM and going to disks --> advanced settings section. But the VMs are not going away from the Defender recommendation "Linux…
Test an encryption and decryption method (developed by me) on the images kept on Azure cloud.
Dear all I wanted to test an encryption and decryption method (developed by me) on the images kept on Azure cloud. Could u please let me know the procedure to deploy my own encryption and decryption method.
unable to create disk encryption
Select a key Caller needs data action: 'Microsoft.KeyVault/vaults/keys/read' to perform action on resource: /subscriptions/8b36142b-c901-4202-89b7-89d1f7b06934/resourceGroups/app-grp/providers/Microsoft.KeyVault/vaults/keyvault455543. For more…
Azure Service Bus Encryption at Rest & Transit (Standard Tier)
Could someone help out in answering this question if Azure Service Bus (Standard Tier) also follows encryption at Rest & Transit as it is for Premium Tier. How could this be verified for a standard tier deployment if encryption is enabled or not. …
unable to create disk encryption
The resource write operation failed to complete successfully, because it reached terminal provisioning state 'Failed'. (Code: ResourceDeploymentFailure, Target:…
Open a file I encrypted
I encrypted a file on my laptop. Usually I put in the password and I'm in. Now, I have to import some certificate. So I do this certificate import wizard thing and it says the file was imported but I still can't open it. Don't know what to do at this…
Tenant Transfer Data Encryption Set Error
Our Azure disk encryption set provisioning state is stuck in failed after transfer of tenant. We can not set the identity and all VM's are not operating. Any ideas?
Disable the Azure Disk Encryption
So i had a Virtual Machine which has an application running on it. I wanted to Applied Disk Encryption so Applied it on my Disk Addition Settings, Encrypting my OS and Data Disk. After that my Server got down. I tried to disable it but it didn't…
Add new data disk to an ADE enabled VM
Hi folks, I have an Azure VM with ADE enabled for all of the Disks. Now, if I want to add a new data disk to the VM how can I ensure that the newly added disk gets encrypted as well using the existing encryption. Also, if I have already added an…
Unable to do azure disk encryption | Error message: '[2.4.0.21] Bitlocker preparation tool failed with -2147211916.\r\nAn unexpected error occurred while running BitLocker Setup
Hi , I am getting below error while doing azure disk encryption - Can someone please guide me on this ? {"code":"VMExtensionProvisioningError","message":"VM has reported a failure when processing extension…
Is SSE with PMK equivalent to full disk encryption?
Is SSE with PMK equivalent to full disk encryption?
Unable to do azure disk encryption
Hi , I am getting below error while doing azure disk encryption - Can someone please guide me on this ? {"code":"VMExtensionProvisioningError","message":"VM has reported a failure when processing extension…
Unable to Enable Encryption at host for Azure VM
I'm attempting to enable Encryption at host for a virtual machine (VM) in Azure. I've confirmed that the "Microsoft.Compute" resource provider is registered in my Azure subscription, and when I run the necessary command to verify, it shows as…
Migrating Azure VM from unmanaged to managed disk
Hello, I am attempting to migrate my Azure VM from unmanaged disk to managed disk and am wondering what steps I should take for a potential backout plan if the migration fails. Additionally, I am unsure how to restore an unmanaged VM from Azure Native…
Who has access to my Azure platform-managed encryption keys?
Hello. The boss is askng a question about who is able to to access the encryption keys for our data that lives in Microsoft Azure. Looking through the docs, I see that employees are "technologically prevented" from accessing those keys. As…