Adjust tone

Removed the repetitive For OS disk only for CVMs

Author: jackrichins

articles/virtual-machines/disk-encryption-overview.md

@@ -14,7 +14,7 @@ ms.custom: references_regions
 
 There are several types of encryption available for your managed disks, including Azure Disk Encryption (ADE), Server-Side Encryption (SSE) and encryption at host.
 
-- **Azure Disk Storage Server-Side Encryption** (also referred to as encryption-at-rest or Azure Storage encryption) is always enabled and automatically encrypts data stored on Azure managed disks (OS and data disks) when persisting on the Storage Clusters. When configured with a Disk Encryption Set (DES), it supports customer-managed keys as well. It does not encrypt temp disks or disk caches. For full details, see [Server-side encryption of Azure Disk Storage](./disk-encryption.md).
+- **Azure Disk Storage Server-Side Encryption** (also referred to as encryption-at-rest or Azure Storage encryption) is always enabled and automatically encrypts data stored on Azure managed disks (OS and data disks) when persisting on the Storage Clusters. When configured with a Disk Encryption Set (DES), it supports customer-managed keys as well. It doesn't encrypt temp disks or disk caches. For full details, see [Server-side encryption of Azure Disk Storage](./disk-encryption.md).
 
 - **Encryption at host** is a Virtual Machine option that enhances Azure Disk Storage Server-Side Encryption to ensure that all temp disks and disk caches are encrypted at rest and flow encrypted to the Storage clusters. For full details, see [Encryption at host - End-to-end encryption for your VM data](./disk-encryption.md#encryption-at-host---end-to-end-encryption-for-your-vm-data).
 
@@ -28,13 +28,13 @@ Encryption is part of a layered approach to security and should be used with oth
 
 Here's a comparison of Disk Storage SSE, ADE, encryption at host, and Confidential disk encryption.
 
-| | **Azure Disk Storage Server-Side Encryption** | **Encryption at Host**  | **Azure Disk Encryption** | **Confidential disk encryption** |
+| | **Azure Disk Storage Server-Side Encryption** | **Encryption at Host**  | **Azure Disk Encryption** | **Confidential disk encryption (For the OS disk only** |
 |--|--|--|--|--|
-| Encryption at rest (OS and data disks) | ✅ | ✅ | ✅ | ✅ For the OS disk only | 
+| Encryption at rest (OS and data disks) | ✅ | ✅ | ✅ | ✅ | 
 | Temp disk encryption | ❌ | ✅ | ✅ | ❌ |
-| Encryption of caches | ❌ | ✅ | ✅ | ✅ For the OS disk only |
-| Data flows encrypted between Compute and Storage | ❌ | ✅ | ✅ | ✅ For the OS disk only |
-| Customer control of keys | ✅ When configured with DES | ✅ When configured with DES | ✅ | ✅ For the OS disk only |
+| Encryption of caches | ❌ | ✅ | ✅ | ✅ |
+| Data flows encrypted between Compute and Storage | ❌ | ✅ | ✅ | ✅ |
+| Customer control of keys | ✅ When configured with DES | ✅ When configured with DES | ✅ | ✅ |
 | Does not use your VM's CPU | ✅ | ✅ | ❌ | ❌ |
 | Works for custom images | ✅ | ✅ | ❌ Does not work for custom Linux images | ✅ |
 | Enhanced Key Protection | ❌ | ❌ | ❌ | ✅ |