@@ -18,28 +18,28 @@ Setting up customer-managed keys for your disks will require you to create resou
18
18
1 . Sign into the [ Azure portal] ( https://portal.azure.com/ ) and search for Key Vault
19
19
1 . Search for and select ** Key Vaults** .
20
20
21
- [ ![ sse-key-vault-portal-search.png] ( media/virtual-machines-disk-encryption-portal/sse-key-vault-portal-search.png )] ( media/virtual-machines-disk-encryption-portal/sse-key-vault-portal-search-expanded.png#lightbox )
21
+ [ ![ sse-key-vault-portal-search.png] ( media/virtual-machines-disk-encryption-portal/sse-key-vault-portal-search.png )] ( media/virtual-machines-disk-encryption-portal/sse-key-vault-portal-search-expanded.png#lightbox )
22
22
23
- > [ !IMPORTANT]
24
- > Your Azure key vault, disk encryption set, VM, disks, and snapshots must all be in the same region and subscription for deployment to succeed.
23
+ > [ !IMPORTANT]
24
+ > Your Azure key vault, disk encryption set, VM, disks, and snapshots must all be in the same region and subscription for deployment to succeed.
25
25
26
26
1 . Select ** +Add** to create a new Key Vault.
27
27
1 . Create a new resource group
28
28
1 . Enter a key vault name, select a region, and select a pricing tier.
29
29
1 . Select ** Review + Create** , verify your choices, then select ** Create** .
30
30
31
- ![ sse-create-a-key-vault.png] ( media/virtual-machines-disk-encryption-portal/sse-create-a-key-vault.png )
31
+ ![ sse-create-a-key-vault.png] ( media/virtual-machines-disk-encryption-portal/sse-create-a-key-vault.png )
32
32
33
33
1 . Once your key vault finishes deploying, select it.
34
34
1 . Select ** Keys** under ** Settings** .
35
35
1 . Select ** Generate/Import**
36
36
37
- ![ sse-key-vault-generate-settings.png] ( media/virtual-machines-disk-encryption-portal/sse-key-vault-generate-settings.png )
37
+ ![ sse-key-vault-generate-settings.png] ( media/virtual-machines-disk-encryption-portal/sse-key-vault-generate-settings.png )
38
38
39
39
1 . Leave both ** Key Type** set to ** RSA** and ** RSA Key Size** set to ** 2080** .
40
40
1 . Fill in the remaining selections as you like and then select ** Create** .
41
41
42
- ![ sse-create-a-key-generate.png] ( media/virtual-machines-disk-encryption-portal/sse-create-a-key-generate.png )
42
+ ![ sse-create-a-key-generate.png] ( media/virtual-machines-disk-encryption-portal/sse-create-a-key-generate.png )
43
43
44
44
#### Setting up your disk encryption set
45
45
@@ -48,19 +48,19 @@ To create and configure disk encryption sets, you must use the following link: h
48
48
1 . Open the [ disk encryption sets link] ( https://aka.ms/diskencryptionsets ) .
49
49
1 . Select ** +Add** .
50
50
51
- ![ sse-create-disk-encryption-set.png] ( media/virtual-machines-disk-encryption-portal/sse-create-disk-encryption-set.png )
51
+ ![ sse-create-disk-encryption-set.png] ( media/virtual-machines-disk-encryption-portal/sse-create-disk-encryption-set.png )
52
52
53
53
1 . Select your resource group, name your encryption set, and select the same region as your key vault.
54
54
1 . Select ** Key vault and key** .
55
55
1 . Select the key vault and key you created previously, as well as the version.
56
56
1 . Press ** Select** .
57
57
1 . Select ** Review + Create** and then ** Create** .
58
58
59
- ![ sse-disk-enc-set-blade-key.png] ( media/virtual-machines-disk-encryption-portal/sse-disk-enc-set-blade-key.png )
59
+ ![ sse-disk-enc-set-blade-key.png] ( media/virtual-machines-disk-encryption-portal/sse-disk-enc-set-blade-key.png )
60
60
61
61
1 . Open the disk encryption set once it finishes creating and select the alert that pops up.
62
62
63
- ![ sse-disk-enc-alert-fix.png] ( media/virtual-machines-disk-encryption-portal/sse-disk-enc-alert-fix.png )
63
+ ![ sse-disk-enc-alert-fix.png] ( media/virtual-machines-disk-encryption-portal/sse-disk-enc-alert-fix.png )
64
64
65
65
Two notifications should pop up and succeed. Doing this will allow you to use the disk encryption set with your key vault.
66
66
@@ -75,10 +75,10 @@ The VM deployment process is similar to the standard deployment process, the onl
75
75
1 . On the ** Basic** tab, select the same region as your disk encryption set and Azure Key Vault.
76
76
1 . Fill in the other values on the ** Basic** tab as you like.
77
77
78
- ![ sse-create-a-vm-region.png] ( media/virtual-machines-disk-encryption-portal/sse-create-a-vm-region.png )
78
+ ![ sse-create-a-vm-region.png] ( media/virtual-machines-disk-encryption-portal/sse-create-a-vm-region.png )
79
79
80
80
1 . On the ** Disks** tab, select ** Encryption at rest with a customer-managed key** .
81
81
1 . Select your disk encryption set in the ** Disk encryption set** drop-down.
82
82
1 . Make the remaining selections as you like.
83
83
84
- ![ sse-create-vm-select-cmk-encryption-set.png] ( media/virtual-machines-disk-encryption-portal/sse-create-vm-select-cmk-encryption-set.png )
84
+ ![ sse-create-vm-select-cmk-encryption-set.png] ( media/virtual-machines-disk-encryption-portal/sse-create-vm-select-cmk-encryption-set.png )
0 commit comments