@Venglatur, Viswanath Thanks for reaching out to Microsoft Q&A. I understand that you have questions related to encryption at host and PMK.
Yes, you can attach it to a different VM. Encryption at host happens at the VM host level. So, when the disk is attached to a new VM, then encryption will be done at that host.
Regarding PMKs, it acts as the KEK(Key Encryption Key) for the DEK(Data Encryption Key), which is the account encryption key in the storage case. This document has information on how encryption at rest works - https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest
Please let me know if you have any more questions and I will be glad to assist further. Thank you!
Remember:
Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.
Want a reminder to come back and check responses? Here is how to subscribe to a notification.