pbi 469

Author: Ankita Dutta

articles/site-recovery/azure-to-azure-how-to-enable-replication-ade-vms.md

@@ -5,7 +5,7 @@ author: ankitaduttaMSFT
 manager: gaggupta
 ms.service: site-recovery
 ms.topic: how-to
-ms.date: 01/31/2024
+ms.date: 05/06/2024
 ms.author: ankitadutta
 
 ---
@@ -168,6 +168,9 @@ Because of the above reasons, the keys are not in sync between source and target
 - REST API
 - PowerShell
 
+> [!NOTE]
+> Azure Site Recovery doesn't support rotating the key for an encrypted virtual machine while it is protected. If you rotate the keys, you must disable and re-enable the replication.
+
 ### Update target VM encryption settings from the Azure portal
 
 If you are using Site Recovery on a VM and have enabled disk encryption on it at a later point, then you might not have any key vault in the target settings. You must add a new key vault in the target.