Encryption at host SKU and Location details

prashanth miryala 21 Reputation points
2023-05-22T12:46:42.6233333+00:00

I see there is a dependency for location and SKU size if we want to enable Encryption at host.

Unable to understand exact SKU size and location it is supported, I did used powershell script mentioned in the below article.

virtualMachines Standard_B12ms CentralUSEUAP 1 MaxResourceVolumeMB 98304
virtualMachines Standard_B16ms CentralUSEUAP 1 MaxResourceVolumeMB 131072
virtualMachines Standard_B1ls CentralUSEUAP 1 MaxResourceVolumeMB 4096
virtualMachines Standard_B1ms CentralUSEUAP 1 MaxResourceVolumeMB 4096
virtualMachines Standard_B1s CentralUSEUAP 1 MaxResourceVolumeMB 4096
virtualMachines Standard_B20ms CentralUSEUAP 1 MaxResourceVolumeMB 163840
virtualMachines Standard_B2ms CentralUSEUAP 1 MaxResourceVolumeMB 16384
virtualMachines Standard_B2s CentralUSEUAP 1 MaxResourceVolumeMB 8192

https://learn.microsoft.com/en-us/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell

could some one help me with SKU and location details which it supports.

Azure Disk Encryption
Azure Disk Encryption
An Azure service for virtual machines (VMs) that helps address organizational security and compliance requirements by encrypting the VM boot and data disks with keys and policies that are controlled in Azure Key Vault.
162 questions
{count} votes

Accepted answer
  1. KarishmaTiwari-MSFT 18,527 Reputation points Microsoft Employee
    2023-05-25T02:35:16.8733333+00:00

    @prashanth miryala Thanks for posting your query on Microsoft Q&A.
    You are using the right command, try it with a few updates shared below.

    You can use the PowerShell command (shared below) to find supported VM sizes for a particular region, to enable end-to-end encryption using encryption at host.

    This example shows you the supported VM sizes for the region eastus. Similarly, you can find the find the supported SKU sizes for any region you are interested in.

    $vmSizes=Get-AzComputeResourceSku | where{$_.ResourceType -eq 'virtualMachines' -and $_.Locations.Contains('eastus')} 
    
    foreach($vmSize in $vmSizes)
    {
        foreach($capability in $vmSize.capabilities)
        {
            if($capability.Name -eq 'EncryptionAtHostSupported' -and $capability.Value -eq 'true')
            {
                $vmSize
    
            }
    
        }
    }
    

    I executed above command in Azure Cloud Shell on Azure Portal and it resulted into output as below:
    User's image

    Please note:

    • Use lower case for region (example - eastus) in the command above.
    • While copying the command from above, you might see an error while pasting on Cloud Shell as it might add spaces, please paste this PowerShell command instead with the region updated, in notepad or another editor.
    • I will ensure that the documentation is updated with better region example.

    If you have any questions at all, please let us know in the "comments" and we would be happy to help you. Comment is the fastest way of notifying the experts.

    Please don’t forget to Accept Answer and hit Yes for "was this answer helpful" wherever the information provided helps you. This can be beneficial to other community members for remediation for similar issues.

    User's image


0 additional answers

Sort by: Most helpful