Double encryption of Azure VM Disks with Azure Encryption at Host (EAH) and Server Side Encryption (SSE)

Question

Is it possible to enable Azure Encryption at Host (EAH) as well as Server Side encryption with Customer Managed Keys on Azure VM disks, kind of double encryption. What are the advantages/disadvantages? What is the performance impact with double encryption?

Answer 1

Hi Vishal,

Encryption at Host and Server Side Encryption are same thing, only the location where encryption/decryption occurs is different. Yes, you can use Customer Managed Keys with both.

Perhaps you are thinking of Double encryption at rest?

Double encryption at rest

https://learn.microsoft.com/en-us/azure/virtual-machines/disk-encryption#double-encryption-at-rest

https://learn.microsoft.com/en-us/azure/virtual-machines/disks-enable-double-encryption-at-rest-portal

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP