Skip to content

Commit 2f9d4c7

Browse files
msmbaldwinjackrichins
authored andcommitted
Update disk-encryption-overview.md
1 parent 9230648 commit 2f9d4c7

File tree

1 file changed

+11
-6
lines changed

1 file changed

+11
-6
lines changed

articles/virtual-machines/disk-encryption-overview.md

Lines changed: 11 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -28,12 +28,17 @@ Encryption is part of a layered approach to security and should be used with oth
2828

2929
Here's a comparison of Disk Storage SSE, ADE, encryption at host, and Confidential disk encryption.
3030

31-
| | Encryption at rest (OS and data disks) | Temp disk encryption | Encryption of caches | Data flows encrypted between Compute and Storage | Customer control of keys | Does not use your VM's CPU | Works for custom images | Enhanced Key Protection | Microsoft Defender for Cloud disk encryption status* |
32-
|--|--|--|--|--|--|--|--|--|--|
33-
| **Azure Disk Storage Server-Side Encryption at rest** | ✅ | ❌ | ❌ | ❌ | ✅ When configured with DES | ✅ | ✅ | ❌ | Unhealthy |
34-
| **Azure Disk Encryption** | ✅ | ✅ | ✅ | ✅ | ✅ |❌ | ❌ Does not work for custom Linux images | ❌ | Healthy |
35-
| **Encryption at Host** | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | Healthy |
36-
| **Confidential disk encryption** | ✅ For the OS disk only | ❌ | ✅ For the OS disk only | ✅ For the OS disk only| ✅ For the OS disk only |❌ | ✅ | ✅ | Not applicable|
31+
| **Azure Disk Storage Server-Side Encryption at rest** | **Azure Disk Encryption** | **Encryption at Host** | **Confidential disk encryption** |
32+
|--|--|--|--|
33+
| Encryption at rest (OS and data disks) | ✅ | ✅ | ✅ | ✅ For the OS disk only |
34+
| Temp disk encryption | ❌ | ✅ | ✅ | ❌ |
35+
| Encryption of caches | ❌ | ✅ | ✅ | ✅ For the OS disk only |
36+
| Data flows encrypted between Compute and Storage | ❌ | ✅ | ✅ | ✅ For the OS disk only |
37+
| Customer control of keys | ✅ When configured with DES | ✅ | ✅ | ✅ For the OS disk only |
38+
| Does not use your VM's CPU | ✅ | ❌ | ✅ | ❌ |
39+
| Works for custom images | ✅ | ❌ Does not work for custom Linux images | ✅ | ✅ |
40+
| Enhanced Key Protection | ❌ | ❌ | ❌ | ✅ |
41+
| Microsoft Defender for Cloud disk encryption status* | Unhealthy | Healthy | Healthy | Not applicable |
3742

3843
> [!IMPORTANT]
3944
> For Confidential disk encryption, Microsoft Defender for Cloud does not currently have a recommendation that is applicable.

0 commit comments

Comments
 (0)