You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- Validating that [Operating System(OS) image](trusted-launch-faq.md#how-can-i-find-vm-sizes-that-support-trusted-launch) supports Trusted Launch
39
39
- Enable Trusted Launch on a test Generation 2 VM and determine if any changes are required to meet the prerequisites before you enable Trusted Launch on Generation 2 VMs associated with production workloads.
40
40
-[Create restore points](create-restore-points.md) for Azure Generation 2 VMs associated with production workloads before you enable the Trusted Launch security type. You can use the restore points to re-create the disks and Generation 2 VM with the previous well-known state.
41
-
- Make sure to change the `-SecurityType` to `TrustedLaunch`, for all deployment scripts this will ensure when virtual machines are provisioned, they will be automatically Trusted Launch.
Azure Advisor populates an **Enable Trusted Launch Compatible Images and VM Sizes for Existing Generation 2 VMs** operational excellence recommendation for existing Generation 2 VMs to adopt [Trusted Launch](trusted-launch.md), a higher security posture for Azure VMs at no additional cost to you. Ensure Generation 2 VM has all prerequisites to migrate to Trusted Launch, follow all the best practices including validation of OS image, VM Size, and creating restore points. For the Advisor recommendation to be considered complete, follow the steps outlined in the [**Enable Trusted Launch on an existing VM**](trusted-launch-existing-vm.md) to upgrade the virtual machines security type and enable Trusted Launch.
47
-
48
-
### What if there is Generation 2 VMs, that doesn't fit the prerequistes for Trusted Launch ?
49
-
50
-
For a Generation 2 VM, that has not met the prerequistes to upgrade to Trusted Launch, look how to fulfill the prerequistes.
51
-
1. If using an OS image not supported, upgrade to Trusted Launch|Gen2 image, most Windows OS support Trusted Launch except Windows 2012 Datacenter offerings. In the case of Linux OS, upgrade to the newest SKU offered by the image distribution.
52
-
2. If using a virtual machine size not supported, please look for an [equivalant Generation 2 size](../sizes/resize-vm.md) that supports Trusted Launch.
53
-
54
-
> [!NOTE]
55
-
>
56
-
> For M-series and ARM64 virtual machine users, please postpone the recommendation for all resources.
57
41
58
42
## Enable Trusted Launch on an existing VM
59
43
@@ -199,6 +183,9 @@ Make sure that you install the latest [Azure PowerShell](/powershell/azure/insta
199
183
200
184
1. Start the upgraded Trusted Launch VM. Verify that you can sign in to the VM by using either RDP (for Windows VMs) or SSH (for Linux VMs).
201
185
186
+
>[!NOTE]
187
+
> Make sure to change the `-SecurityType` to `TrustedLaunch`, for all deployment scripts this will ensure when virtual machines are provisioned, they will be automatically Trusted Launch.
188
+
202
189
### [Template](#tab/template)
203
190
204
191
Follow the steps to enable Trusted Launch on an existing Azure Generation 2 VM by using an ARM template.
@@ -311,6 +298,17 @@ Follow the steps to enable Trusted Launch on an existing Azure Generation 2 VM b
311
298
312
299
---
313
300
301
+
## Azure Advisor Recommendation
302
+
303
+
Azure Advisor populates an **Enable Trusted Launch Compatible Images and VM Sizes for Existing Generation 2 VMs** operational excellence recommendation for existing Generation 2 VMs to adopt [Trusted Launch](trusted-launch.md), a higher security posture for Azure VMs at no additional cost to you. Ensure Generation 2 VM has all prerequisites to migrate to Trusted Launch, follow all the best practices including validation of OS image, VM Size, and creating restore points. For the Advisor recommendation to be considered complete, follow the steps outlined in the [**Enable Trusted Launch on an existing VM**](trusted-launch-existing-vm.md) to upgrade the virtual machines security type and enable Trusted Launch.
304
+
305
+
### What if there is Generation 2 VMs, that doesn't fit the prerequistes for Trusted Launch ?
306
+
307
+
For a Generation 2 VM, that has not met the prerequistes to upgrade to Trusted Launch, look how to fulfill the prerequistes.
308
+
1. If using an OS image not supported, upgrade to Trusted Launch|Gen2 image, most Windows OS support Trusted Launch except Windows 2012 Datacenter offerings. In the case of Linux OS, upgrade to the newest SKU offered by the image distribution.
309
+
2. If using a virtual machine size not supported, please look for an [equivalant Trusted Launch supported size](/sizes/resize-vm.md) that supports Trusted Launch.
310
+
311
+
314
312
## Related content
315
313
316
314
- After the upgrades, we recommend that you enable [boot integrity monitoring](trusted-launch.md#microsoft-defender-for-cloud-integration) to monitor the health of the VM by using Microsoft Defender for Cloud.
0 commit comments