Disk encryption with customer key

Andrea 256 Reputation points
2024-10-24T15:43:54.2966667+00:00

Hello guys,

I've followed this article (https://learn.microsoft.com/en-us/azure/virtual-machines/disks-enable-customer-managed-keys-portal) to configure KeyVault to store customer key and apply this CMK to VM OS disk and it would appear that the procedure was successful (in the portal I can see my disks with "SSE with CMK" encryption) but if I try to check the encryption status with this command:

Get-AzVmDiskEncryptionStatus -ResourceGroupName "myRG" -VMName "MyVM"

the output is:

OsVolumeEncrypted : NotEncrypted

DataVolumesEncrypted : NotEncrypted

OsVolumeEncryptionSettings :

ProgressMessage : No Encryption extension or metadata found on the VM

Is this the correct command to verify the encryption status of the VM disks? or I need to execute some other tasks to accomplish this procedure?

thanks!

Azure Disk Encryption
Azure Disk Encryption
An Azure service for virtual machines (VMs) that helps address organizational security and compliance requirements by encrypting the VM boot and data disks with keys and policies that are controlled in Azure Key Vault.
175 questions
0 comments No comments
{count} votes

Accepted answer
  1. TP 98,176 Reputation points
    2024-10-24T16:25:29.64+00:00

    Hi Andrea,

    Please use command similar to below:

    (Get-AzDisk -ResourceGroupName myRG -DiskName myDisk).Encryption
    

    The command you were using is for Azure Disk Encryption (ADE) which is different. You are using Server Side Encryption (SSE).

    Please click Accept Answer and upvote if the above was helpful.

    Thanks.

    -TP

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.