You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Create an Azure resource group with [New-AzResourceGroup](/powershell/module/az.resources/new-azresourcegroup). A resource group is a logical container into which Azure resources are deployed and managed:
It will take a few minutes for your VM to be deployed.
39
37
40
-
## Create a Key Vault
38
+
## Create a Key Vault configured for encryption keys
41
39
42
40
Azure disk encryption stores its encryption key in an Azure Key Vault. Create a Key Vault with [New-AzKeyvault](/powershell/module/az.keyvault/new-azkeyvault). To enable the Key Vault to store encryption keys, use the -EnabledForDiskEncryption parameter.
43
41
44
42
> [!Important]
45
43
> Each Key Vault must have a unique name. The following example creates a Key Vault named *myKV*, but you must name yours something different.
@@ -54,7 +52,7 @@ Encrypt your VM with [Set-AzVmDiskEncryptionExtension](/powershell/module/az.com
54
52
55
53
Set-AzVmDiskEncryptionExtension requires some values from your Key Vault object. You can obtain these values by passing the unique name of your key vault to [Get-AzKeyvault](/powershell/module/az.keyvault/get-azkeyvault).
@@ -87,7 +85,7 @@ ProgressMessage : OS disk encryption started
87
85
88
86
When no longer needed, you can use the [Remove-AzResourceGroup](/powershell/module/az.resources/remove-azresourcegroup) cmdlet to remove the resource group, VM, and all related resources:
Create an Azure resource group with [New-AzResourceGroup](/powershell/module/az.resources/new-azresourcegroup). A resource group is a logical container into which Azure resources are deployed and managed:
It will take a few minutes for your VM to be deployed.
39
37
40
-
## Create a Key Vault
38
+
## Create a Key Vault configured for encryption keys
41
39
42
40
Azure disk encryption stores its encryption key in an Azure Key Vault. Create a Key Vault with [New-AzKeyvault](/powershell/module/az.keyvault/new-azkeyvault). To enable the Key Vault to store encryption keys, use the -EnabledForDiskEncryption parameter.
43
41
44
42
> [!Important]
45
43
> Each Key Vault must have a unique name. The following example creates a Key Vault named *myKV*, but you must name yours something different.
@@ -54,7 +52,7 @@ Encrypt your VM with [Set-AzVmDiskEncryptionExtension](/powershell/module/az.com
54
52
55
53
Set-AzVmDiskEncryptionExtension requires some values from your Key Vault object. You can obtain these values by passing the unique name of your key vault to [Get-AzKeyvault](/powershell/module/az.keyvault/get-azkeyvault).
When no longer needed, you can use the [Remove-AzResourceGroup](/powershell/module/az.resources/remove-azresourcegroup) cmdlet to remove the resource group, VM, and all related resources:
0 commit comments