Skip to content

Commit a31c57e

Browse files
committed
Standardize capitalization
1 parent 5a0f728 commit a31c57e

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/virtual-machines/disk-encryption-overview.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -20,24 +20,24 @@ There are several types of encryption available for your managed disks, includin
2020

2121
- **Encryption at host** ensures that data stored on the VM host hosting your VM is encrypted at rest and flows encrypted to the Storage clusters. For full details, see [Encryption at host - End-to-end encryption for your VM data](./disk-encryption.md#encryption-at-host---end-to-end-encryption-for-your-vm-data).
2222

23-
- **Confidential Disk Encryption** binds disk encryption keys to the virtual machine's TPM and makes the protected disk content accessible only to the VM. The TPM and VM guest state is always encrypted in attested code using keys released by a secure protocol that bypasses the hypervisor and host operating system. Currently only available for the OS disk. Encryption at host may be used for other disks on a Confidential VM in addition to Confidential Disk Encryption. For full details, see [DCasv5 and ECasv5 series confidential VMs](../confidential-computing/confidential-vm-overview.md#full-disk-encryption).
23+
- **Confidential disk encryption** binds disk encryption keys to the virtual machine's TPM and makes the protected disk content accessible only to the VM. The TPM and VM guest state is always encrypted in attested code using keys released by a secure protocol that bypasses the hypervisor and host operating system. Currently only available for the OS disk. Encryption at host may be used for other disks on a Confidential VM in addition to Confidential Disk Encryption. For full details, see [DCasv5 and ECasv5 series confidential VMs](../confidential-computing/confidential-vm-overview.md#full-disk-encryption).
2424

2525
Encryption is part of a layered approach to security and should be used with other recommendations to secure Virtual Machines and their disks. For full details, see [Security recommendations for virtual machines in Azure](security-recommendations.md) and [Restrict import/export access to managed disks](disks-enable-private-links-for-import-export-portal.md).
2626

2727
## Comparison
2828

29-
Here's a comparison of SSE, ADE, and encryption at host.
29+
Here's a comparison of SSE, ADE, encryption at host, and Confidential disk encryption.
3030

3131
| | Encryption at rest (OS and data disks) | Temp disk encryption | Encryption of caches | Data flows encrypted between Compute and Storage | Customer control of keys | Does not use your VM's CPU | Works for custom images | Enhanced Key Protection | Microsoft Defender for Cloud disk encryption status |
3232
|--|--|--|--|--|--|--|--|--|--|
3333
| **Encryption at rest with platform-managed key (SSE+PMK)** | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | Unhealthy, not applicable if exempt |
3434
| **Encryption at rest with customer-managed key (SSE+CMK)** | ✅ | ❌ | ❌ | ❌ | ✅ | ✅ | ✅ | ❌ | Unhealthy, not applicable if exempt |
3535
| **Azure Disk Encryption** | ✅ | ✅ | ✅ | ✅ | ✅ |❌ | ❌ Does not work for custom Linux images | ❌ | Healthy |
3636
| **Encryption at Host** | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | Unhealthy, not applicable if exempt |
37-
| **Confidential Disk Encryption** | ✅ For the OS disk only | ❌ | ✅ For the OS disk only | ✅ For the OS disk only| ✅ For the OS disk only |❌ | ✅ | ✅ | Unhealthy, not applicable if exempt |
37+
| **Confidential disk encryption** | ✅ For the OS disk only | ❌ | ✅ For the OS disk only | ✅ For the OS disk only| ✅ For the OS disk only |❌ | ✅ | ✅ | Unhealthy, not applicable if exempt |
3838

3939
> [!IMPORTANT]
40-
> For Encryption at Host and Confidential Disk Encryption, Microsoft Defender for Cloud does not detect the encryption state. We are in the process of updating Microsoft Defender
40+
> For Encryption at host and Confidential disk encryption, Microsoft Defender for Cloud does not detect the encryption state. We are in the process of updating Microsoft Defender
4141
4242
## Next steps
4343

0 commit comments

Comments
 (0)