When 'enabledfordiskencryption' is True, networkAcLs.bypass must include "Azure Services".

Satyam 25

User's image

I am trying to create a key vault and selected only the option Azure Disk encryption for volume encryption under Access policy.

For networking it was left to default i.e. all networks. But the deployment is failing for key vault. I have attached the screenshot of the error.

For reference I am following the process of "Create and encrypt a Windows virtual machine with the Azure portal"

Raja Pothuraju 4,780 Reputation points Microsoft Vendor

2024-08-13T21:04:01.61+00:00

Hello @Satyam,

Thank you for posting your query on Microsoft Q&A.

I am checking this and will get back to you with further inputs.

Thanks,
Raja Pothuraju.
Raja Pothuraju 4,780 Reputation points Microsoft Vendor

2024-08-18T17:20:48.0033333+00:00

Hello @Satyam,

Thank you for your time and patience.

It seems you're trying to create a Key Vault and encountered a 'BadRequest' error because 'enabledForDeployment' is set to true without including 'AzureServices' in 'networkAcls.bypass'.

To resolve this issue, I recommend modifying the network settings to 'selected networks', enabling 'allow trusted services', and then applying these changes to your environment.

Please let me know if this helps resolve the issue.

Thanks,
Raja Pothuraju.
Raja Pothuraju 4,780 Reputation points Microsoft Vendor

2024-08-20T02:05:28.4666667+00:00

Hello @Satyam,

Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.
Raja Pothuraju 4,780 Reputation points Microsoft Vendor

2024-08-21T01:00:59.6866667+00:00

Hello @Sean Charles Pugosa,

Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.

Share via

When 'enabledfordiskencryption' is True, networkAcLs.bypass must include "Azure Services".

Your answer