Merge pull request #268981 from asudbring/encrypt-how-to-posh

Added section to articles on how to enable encryption on an existing VNET

Author: prmerger-automator[bot]

articles/virtual-network/how-to-create-encryption-cli.md

@@ -52,6 +52,18 @@ Use [az network vnet create](/cli/azure/network/vnet#az-network-vnet-create) to
     --subnet-prefixes 10.0.0.0/24 
 ```
 
+## Enable on existing virtual network
+
+You can also enable encryption on an existing virtual network using [az network vnet update](/cli/azure/network/vnet#az-network-vnet-update).
+
+```azurecli-interactive
+  az network vnet update \
+    --resource-group test-rg \
+    --name vnet-1 \
+    --enable-encryption true \
+    --encryption-enforcement-policy allowUnencrypted
+```
+
 > [!IMPORTANT]
 > Azure Virtual Network encryption requires supported virtual machine SKUs in the virtual network for traffic to be encrypted. For more information, see [Azure Virtual Network encryption requirements](virtual-network-encryption-overview.md#requirements).
 

articles/virtual-network/how-to-create-encryption-portal.md

@@ -25,6 +25,8 @@ Azure Virtual Network encryption is a feature of Azure Virtual Network. Virtual
 
 ## Enable encryption
 
+Use the following steps to enable encryption for a virtual network.
+
 1. In the search box at the top of the portal, begin typing **Virtual networks**. When **Virtual networks** appears in the search results, select it.
 
 1. Select **vnet-1**.

articles/virtual-network/how-to-create-encryption-powershell.md

@@ -68,6 +68,26 @@ New-AzVirtualNetwork @net
 
 ```
 
+## Enable on existing virtual network
+
+You can also enable encryption on an existing virtual network using [Set-AzVirtualNetwork](/powershell/module/az.network/set-azvirtualnetwork).
+
+```azurepowershell-interactive
+## Place the virtual network configuration into a variable. ##
+$net = @{
+    Name = 'vnet-1'
+    ResourceGroupName = 'test-rg'
+}
+$vnet = Get-AzVirtualNetwork @net
+
+## Enable encryption on the virtual network ##
+$vnet.Encryption = @{
+    Enabled = 'true'
+    Enforcement = 'allowUnencrypted'
+}
+$vnet | Set-AzVirtualNetwork
+```
+
 > [!IMPORTANT]
 > Azure Virtual Network encryption requires supported virtual machine SKUs in the virtual network for traffic to be encrypted. For more information, see [Azure Virtual Network encryption requirements](virtual-network-encryption-overview.md#requirements).