You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
az feature register --name EncryptionAtHost --namespace Microsoft.Compute
50
-
```
48
+
```azurecli
49
+
az feature register --name EncryptionAtHost --namespace Microsoft.Compute
50
+
```
51
51
52
-
---
52
+
---
53
53
54
-
1.Confirm that the registration state is **Registered** (registration may take a few minutes) using the following command before trying out the feature.
54
+
1.Confirm that the registration state is **Registered** (registration may take a few minutes) using the following command before trying out the feature.
az feature show --name EncryptionAtHost --namespace Microsoft.Compute
66
-
```
67
-
---
64
+
```azurecli
65
+
az feature show --name EncryptionAtHost --namespace Microsoft.Compute
66
+
```
67
+
68
+
---
68
69
69
70
## Deploy a VM with platform-managed keys
70
71
@@ -73,12 +74,12 @@ You must enable the feature for your subscription before you can use encryption
73
74
1. Select an appropriate region and a supported VM size.
74
75
1. Fill in the other values on the **Basic** pane as you like, and then proceed to the **Disks** pane.
75
76
76
-
:::image type="content" source="media/virtual-machines-disks-encryption-at-host-portal/disks-encryption-at-host-basic-blade.png" alt-text="Screenshot of the virtual machine creation basics pane, region and VM size are highlighted." lightbox="media/virtual-machines-disks-encryption-at-host-portal/disks-encryption-at-host-basic-blade.png":::
77
+
:::image type="content" source="media/virtual-machines-disks-encryption-at-host-portal/disks-encryption-at-host-basic-blade.png" alt-text="Screenshot of the virtual machine creation basics pane, region and VM size are highlighted." lightbox="media/virtual-machines-disks-encryption-at-host-portal/disks-encryption-at-host-basic-blade.png":::
77
78
78
79
1. On the **Disks** pane, select **Encryption at host**.
79
80
1. Make the remaining selections as you like.
80
81
81
-
:::image type="content" source="media/virtual-machines-disks-encryption-at-host-portal/host-based-encryption-platform-keys.png" alt-text="Screenshot of the virtual machine creation disks pane, encryption at host highlighted." lightbox="media/virtual-machines-disks-encryption-at-host-portal/host-based-encryption-platform-keys.png":::
82
+
:::image type="content" source="media/virtual-machines-disks-encryption-at-host-portal/host-based-encryption-platform-keys.png" alt-text="Screenshot of the virtual machine creation disks pane, encryption at host highlighted." lightbox="media/virtual-machines-disks-encryption-at-host-portal/host-based-encryption-platform-keys.png":::
82
83
83
84
1. For the rest of the VM deployment process, make selections that fit your environment, and complete the deployment.
84
85
@@ -103,13 +104,13 @@ Now that you've setup an Azure Key Vault and disk encryption set, you can deploy
103
104
1. Create a new virtual machine, select an appropriate region and a supported VM size.
104
105
1. Fill in the other values on the **Basic** pane as you like, then proceed to the **Disks** pane.
105
106
106
-
:::image type="content" source="media/virtual-machines-disks-encryption-at-host-portal/disks-encryption-at-host-basic-blade.png" alt-text="Screenshot of the virtual machine creation basics pane, region and VM size are highlighted." lightbox="media/virtual-machines-disks-encryption-at-host-portal/disks-encryption-at-host-basic-blade.png":::
107
+
:::image type="content" source="media/virtual-machines-disks-encryption-at-host-portal/disks-encryption-at-host-basic-blade.png" alt-text="Screenshot of the virtual machine creation basics pane, region and VM size are highlighted." lightbox="media/virtual-machines-disks-encryption-at-host-portal/disks-encryption-at-host-basic-blade.png":::
107
108
108
-
1. On the **Disks** pane, select **Encryption at host**.
109
-
1. Select **Key management** and select one of your customer-managed keys.
109
+
1. On the **Disks** pane, select **Encryption at host**.
110
+
1. Select **Key management** and select one of your customer-managed keys.
110
111
1. Make the remaining selections as you like.
111
112
112
-
:::image type="content" source="media/virtual-machines-disks-encryption-at-host-portal/disks-host-based-encryption-customer-managed-keys.png" alt-text="Screenshot of the virtual machine creation disks pane, encryption at host is highlighted, customer-managed keys selected." lightbox="media/virtual-machines-disks-encryption-at-host-portal/disks-host-based-encryption-customer-managed-keys.png":::
113
+
:::image type="content" source="media/virtual-machines-disks-encryption-at-host-portal/disks-host-based-encryption-customer-managed-keys.png" alt-text="Screenshot of the virtual machine creation disks pane, encryption at host is highlighted, customer-managed keys selected." lightbox="media/virtual-machines-disks-encryption-at-host-portal/disks-host-based-encryption-customer-managed-keys.png":::
113
114
114
115
1. For the rest of the VM deployment process, make selections that fit your environment, and complete the deployment.
115
116
@@ -121,7 +122,7 @@ Deallocate your VM first, encryption at host can't be disabled unless your VM is
121
122
122
123
1. On your VM, select **Disks** and then select **Additional settings**.
123
124
124
-
:::image type="content" source="media/virtual-machines-disks-encryption-at-host-portal/disks-encryption-host-based-encryption-additional-settings.png" alt-text="Screenshot of the Disks pane on a VM, Additional Settings is highlighted.":::
125
+
:::image type="content" source="media/virtual-machines-disks-encryption-at-host-portal/disks-encryption-host-based-encryption-additional-settings.png" alt-text="Screenshot of the Disks pane on a VM, Additional Settings is highlighted.":::
125
126
126
127
1. Select **No** for **Encryption at host** then select **Save**.
0 commit comments