Disk encryption set troubleshooting

Question

Disk encryption set troubleshooting

Varshney, Aayushi 0

I am trying to use this command:

$ az vm create --name $VM_NAME --size $VM_SKU --resource-group $RG_NAME --location $RG_LOCATION --image $VM_IMAGE --os-disk-size-gb $VM_OS_DISK --storage-sku Standard_LRS --os-disk-encryption-set $VM_OS_DISK_ENCSET --attach-data-disks $DATA_DISK_NAME --generate-ssh-keys --output json --verbose --admin-username "localadmin" --admin-password $ADMINP --authentication-type "all" --nics $NIC_ID --priority Spot --max-price -1

344Argument '--max-price' is in preview. It may be changed/removed in a future release.

345SSH key files '/root/.ssh/id_rsa' and '/root/.ssh/id_rsa.pub' have been generated under ~/.ssh to allow SSH access to the VM. If using machines without permanent storage, back up your keys to a safe location.

error i am getting:

346Deployment failed. Correlation ID: ####. {

347 "error": {

348 "code": "OperationNotAllowed",

349 "message": "Managed disk encryption set resource id change for disk 'xd####vm1_OsDisk_1_####' via Virtual Machine 'xd####vm1' is not allowed. Please update disk resource at /subscriptions/####/resourceGroups/####/providers/Microsoft.Compute/disks/xd####vm1_OsDisk_####.",

350 "target": "diskEncryptionSets"

351 }

352}

chrischin 1,000 Reputation points Microsoft Employee

2025-04-06T02:38:14.1+00:00

You will probably also need to stop the VM before applying a DES to its disk.
Varshney, Aayushi 0 Reputation points

2025-04-07T03:43:27.6733333+00:00

now getting this error after applying your solution @Sudheer Reddy

Deployment failed. Correlation ID: 33105174-977f-40e9-b34d-1a3cffb89aea. {

632 "error": {

633 "code": "PropertyChangeNotAllowed",

634 "message": "Changing property 'linuxConfiguration.ssh.publicKeys' is not allowed.",

635 "target": "linuxConfiguration.ssh.publicKeys"

636 }

637}

on this command: $ az vm create --name $VM_NAME --size $VM_SKU --resource-group $RG_NAME --location $RG_LOCATION --image $VM_IMAGE --os-disk-size-gb --attach-data-disks $DATA_DISK_NAME --generate-ssh-keys --output json --verbose --admin-username "localadmin" --admin-password $ADMINP --authentication-type "all" --nics $NIC_ID --priority Spot --max-price -1
Varshney, Aayushi 0 Reputation points

2025-04-07T05:05:43.47+00:00

what does this error message says any ides??

Deployment failed. Correlation ID: 39d710dd-079c-4a4c-bcad-b1a388d23e1c. {

650 "error": {

651 "code": "ResourcePurchaseCanceling",

652 "message": "The resource 'xd387239296vm1' with the id 'Microsoft.Compute/virtualMachines/xd387239296vm1' has a previous order being canceled. Please try after some time or create resource with different name. "

653 }

654}
Sudheer Reddy 2,075 Reputation points Moderator

2025-04-07T22:52:10.38+00:00

Hi Varshney, Aayushi,

Based on the error above suggests, please try to ensure that create a vm with different name to avoid conflicts.

If you have any queries, please do let us know, we will help you.

1 answer

Your answer

chrischin 1,000 Reputation points Microsoft Employee

2025-04-06T02:38:14.1+00:00

You will probably also need to stop the VM before applying a DES to its disk.
Varshney, Aayushi 0 Reputation points

2025-04-07T03:43:27.6733333+00:00

now getting this error after applying your solution @Sudheer Reddy

Deployment failed. Correlation ID: 33105174-977f-40e9-b34d-1a3cffb89aea. {

632 "error": {

633 "code": "PropertyChangeNotAllowed",

634 "message": "Changing property 'linuxConfiguration.ssh.publicKeys' is not allowed.",

635 "target": "linuxConfiguration.ssh.publicKeys"

636 }

637}

on this command: $ az vm create --name $VM_NAME --size $VM_SKU --resource-group $RG_NAME --location $RG_LOCATION --image $VM_IMAGE --os-disk-size-gb --attach-data-disks $DATA_DISK_NAME --generate-ssh-keys --output json --verbose --admin-username "localadmin" --admin-password $ADMINP --authentication-type "all" --nics $NIC_ID --priority Spot --max-price -1
Varshney, Aayushi 0 Reputation points

2025-04-07T05:05:43.47+00:00

what does this error message says any ides??

Deployment failed. Correlation ID: 39d710dd-079c-4a4c-bcad-b1a388d23e1c. {

650 "error": {

651 "code": "ResourcePurchaseCanceling",

652 "message": "The resource 'xd387239296vm1' with the id 'Microsoft.Compute/virtualMachines/xd387239296vm1' has a previous order being canceled. Please try after some time or create resource with different name. "

653 }

654}
Sudheer Reddy 2,075 Reputation points Moderator

2025-04-07T22:52:10.38+00:00

Hi Varshney, Aayushi,

Based on the error above suggests, please try to ensure that create a vm with different name to avoid conflicts.

If you have any queries, please do let us know, we will help you.

Answer 1

Hi Varshney, Aayushi,

Based on above command you are trying to specify a Disk Encryption Set to be used for encrypting the OS disk during Virtual Machine creation process as the error indicates the change is not allowed via Virtual Machine.

First create a VM and then later update an encryption on the disk itself with DES.

az disk update --name <DiskName> --resource-group <ResourceGroupName> --disk-encryption-set

https://learn.microsoft.com/en-us/cli/azure/disk?view=azure-cli-latest#az-disk-update

If the information is helpful, please click on "Upvote"

If you have any queries, please do let us know, we will help you.

Share via

Disk encryption set troubleshooting

1 answer

Your answer