@@ -31,7 +31,7 @@ For a full list of prerequisites, see [Azure Disk Encryption for Linux VMs](../l
31
31
- [ Networking requirements] ( ../linux/disk-encryption-overview.md#networking-requirements )
32
32
- [ Encryption key storage requirements] ( ../linux/disk-encryption-overview.md#encryption-key-storage-requirements )
33
33
34
- ## Extension schemata
34
+ ## Extension Schema
35
35
36
36
There are two versions of extension schema for Azure Disk Encryption (ADE):
37
37
- v1.1 - A newer recommended schema that does not use Azure Active Directory (AAD) properties.
@@ -51,18 +51,18 @@ The v1.1 schema is recommended and does not require Azure Active Directory (AAD)
51
51
"location" : " [location]" ,
52
52
"properties" : {
53
53
"publisher" : " Microsoft.Azure.Security" ,
54
- "type" : " AzureDiskEncryptionForLinux" ,
55
- "typeHandlerVersion" : " [extensionVersion] " ,
56
- "autoUpgradeMinorVersion" : true ,
54
+ "type" : " AzureDiskEncryptionForLinux" ,
55
+ "typeHandlerVersion" : " 1.1 " ,
56
+ "autoUpgradeMinorVersion" : true ,
57
57
"settings" : {
58
58
"DiskFormatQuery" : " [diskFormatQuery]" ,
59
59
"EncryptionOperation" : " [encryptionOperation]" ,
60
- "KeyEncryptionAlgorithm" : " [keyEncryptionAlgorithm]" ,
61
- "KeyVaultURL" : " [keyVaultURL]" ,
62
- "KeyVaultResourceId" : " [KeyVaultResourceId]" ,
63
- "KeyEncryptionKeyURL" : " [keyEncryptionKeyURL]" ,
64
- "KekVaultResourceId" : " [KekVaultResourceId" ,
65
- "SequenceVersion" : " sequenceVersion]" ,
60
+ "KeyEncryptionAlgorithm" : " [keyEncryptionAlgorithm]" ,
61
+ "KeyVaultURL" : " [keyVaultURL]" ,
62
+ "KeyVaultResourceId" : " [KeyVaultResourceId]" ,
63
+ "KeyEncryptionKeyURL" : " [keyEncryptionKeyURL]" ,
64
+ "KekVaultResourceId" : " [KekVaultResourceId" ,
65
+ "SequenceVersion" : " sequenceVersion]" ,
66
66
"VolumeType" : " [volumeType]"
67
67
}
68
68
}
@@ -83,23 +83,23 @@ Using `AADClientSecret`:
83
83
"apiVersion" : " 2019-07-01" ,
84
84
"location" : " [location]" ,
85
85
"properties" : {
86
- "protectedSettings" : {
87
- "AADClientSecret" : " [aadClientSecret]" ,
88
- "Passphrase" : " [passphrase]"
89
- },
90
- "publisher" : " Microsoft.Azure.Security" ,
91
- "type" : " AzureDiskEncryptionForLinux" ,
92
- "typeHandlerVersion" : " [extensionVersion] " ,
93
- "settings" : {
94
- "AADClientID" : " [aadClientID]" ,
95
- "DiskFormatQuery" : " [diskFormatQuery]" ,
96
- "EncryptionOperation" : " [encryptionOperation]" ,
97
- "KeyEncryptionAlgorithm" : " [keyEncryptionAlgorithm]" ,
98
- "KeyEncryptionKeyURL" : " [keyEncryptionKeyURL]" ,
99
- "KeyVaultURL" : " [keyVaultURL]" ,
100
- "SequenceVersion" : " sequenceVersion]" ,
101
- "VolumeType" : " [volumeType]"
102
- }
86
+ "protectedSettings" : {
87
+ "AADClientSecret" : " [aadClientSecret]" ,
88
+ "Passphrase" : " [passphrase]"
89
+ },
90
+ "publisher" : " Microsoft.Azure.Security" ,
91
+ "type" : " AzureDiskEncryptionForLinux" ,
92
+ "typeHandlerVersion" : " 0.1 " ,
93
+ "settings" : {
94
+ "AADClientID" : " [aadClientID]" ,
95
+ "DiskFormatQuery" : " [diskFormatQuery]" ,
96
+ "EncryptionOperation" : " [encryptionOperation]" ,
97
+ "KeyEncryptionAlgorithm" : " [keyEncryptionAlgorithm]" ,
98
+ "KeyEncryptionKeyURL" : " [keyEncryptionKeyURL]" ,
99
+ "KeyVaultURL" : " [keyVaultURL]" ,
100
+ "SequenceVersion" : " sequenceVersion]" ,
101
+ "VolumeType" : " [volumeType]"
102
+ }
103
103
}
104
104
}
105
105
```
@@ -113,23 +113,23 @@ Using `AADClientCertificate`:
113
113
"apiVersion" : " 2019-07-01" ,
114
114
"location" : " [location]" ,
115
115
"properties" : {
116
- "protectedSettings" : {
117
- "AADClientCertificate" : " [aadClientCertificate]" ,
118
- "Passphrase" : " [passphrase]"
119
- },
120
- "publisher" : " Microsoft.Azure.Security" ,
121
- "type" : " AzureDiskEncryptionForLinux" ,
122
- "typeHandlerVersion" : " [extensionVersion] " ,
123
- "settings" : {
124
- "AADClientID" : " [aadClientID]" ,
125
- "DiskFormatQuery" : " [diskFormatQuery]" ,
126
- "EncryptionOperation" : " [encryptionOperation]" ,
127
- "KeyEncryptionAlgorithm" : " [keyEncryptionAlgorithm]" ,
128
- "KeyEncryptionKeyURL" : " [keyEncryptionKeyURL]" ,
129
- "KeyVaultURL" : " [keyVaultURL]" ,
130
- "SequenceVersion" : " sequenceVersion]" ,
131
- "VolumeType" : " [volumeType]"
132
- }
116
+ "protectedSettings" : {
117
+ "AADClientCertificate" : " [aadClientCertificate]" ,
118
+ "Passphrase" : " [passphrase]"
119
+ },
120
+ "publisher" : " Microsoft.Azure.Security" ,
121
+ "type" : " AzureDiskEncryptionForLinux" ,
122
+ "typeHandlerVersion" : " 0.1 " ,
123
+ "settings" : {
124
+ "AADClientID" : " [aadClientID]" ,
125
+ "DiskFormatQuery" : " [diskFormatQuery]" ,
126
+ "EncryptionOperation" : " [encryptionOperation]" ,
127
+ "KeyEncryptionAlgorithm" : " [keyEncryptionAlgorithm]" ,
128
+ "KeyEncryptionKeyURL" : " [keyEncryptionKeyURL]" ,
129
+ "KeyVaultURL" : " [keyVaultURL]" ,
130
+ "SequenceVersion" : " sequenceVersion]" ,
131
+ "VolumeType" : " [volumeType]"
132
+ }
133
133
}
134
134
}
135
135
```
@@ -142,7 +142,7 @@ Using `AADClientCertificate`:
142
142
| apiVersion | 2019-07-01 | date |
143
143
| publisher | Microsoft.Azure.Security | string |
144
144
| type | AzureDiskEncryptionForLinux | string |
145
- | typeHandlerVersion | 0 .1, 1 .1 | int |
145
+ | typeHandlerVersion | 1 .1, 0 .1 | int |
146
146
| (0.1 schema) AADClientID | xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx | guid |
147
147
| (0.1 schema) AADClientSecret | password | string |
148
148
| (0.1 schema) AADClientCertificate | thumbprint | string |
@@ -169,7 +169,7 @@ For an example of template deployment based on schema v0.1, see the Azure Quicks
169
169
> - Disabling encryption on Linux VMs is only supported for data volumes. It is not supported on data or OS volumes if the OS volume has been encrypted.
170
170
171
171
> [ !NOTE]
172
- > Also if ` VolumeType ` parameter is set to Data or All, data disks will be encrypted only if they are properly mounted.
172
+ > Also if ` VolumeType ` parameter is set to All, data disks will be encrypted only if they are properly mounted.
173
173
174
174
## Troubleshoot and support
175
175
0 commit comments