replicate virtual machines with disk encryption and to another subscription.

Question

How to replicate VM 's with disk encryption and is it possible to replicate VM's to other subscription.

Answer 1

Hello NARENDRA,

Thank you for posting your query on Microsoft Q&A platform.

1. Yes, Site Recovery supports disaster recovery for virtual machines with Azure Disk Encryption (ADE) enabled. When replication is enabled, Azure transfers all necessary disk encryption keys and secrets from the source region to the target region within the user context. If you lack the required permissions, your security administrator can use a script to transfer the keys and secrets.

• Site Recovery is compatible with ADE for Azure virtual machines running Windows.
• Supported ADE versions include:
• Version 0.1, which requires Microsoft Entra ID due to its schema.
• Version 1.1, which does not require Microsoft Entra ID. For this version, Azure virtual machines must use managed disks.

2. Azure virtual machines can be replicated to any subscription within the same Microsoft Entra tenant. When disaster recovery is enabled, the source virtual machine’s subscription is set as the default target. However, you have the option to change the target subscription, and settings like the resource group and virtual network will automatically update based on your selection.

Reference: https://learn.microsoft.com/en-us/azure/site-recovery/site-recovery-overview

Thanks,

Suchitra.