Disk Encryption

Question

How do I get a list of servers by encryption type (SSE/ADE or both)?

Answer 1

Hey @Jack Vrtar (Admin) ,

I am just wondering if the below script will work for you.

Taken from here:

You can find all ADE-encrypted VMs and the extension version, in all resource groups present in a subscription, using this PowerShell script.

Alternatively, these cmdlets will show all ADE-encrypted VMs (but not the extension version):

$osVolEncrypted = {(Get-AzVMDiskEncryptionStatus -ResourceGroupName $_.ResourceGroupName -VMName $_.Name).OsVolumeEncrypted}  
$dataVolEncrypted= {(Get-AzVMDiskEncryptionStatus -ResourceGroupName $_.ResourceGroupName -VMName $_.Name).DataVolumesEncrypted}  
Get-AzVm | Format-Table @{Label="MachineName"; Expression={$_.Name}}, @{Label="OsVolumeEncrypted"; Expression=$osVolEncrypted}, @{Label="DataVolumesEncrypted"; Expression=$dataVolEncrypted}  

Example of the output:

---

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Sincerely,
Olga O