You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-machines/linux/disk-encryption-overview.md
+10-10Lines changed: 10 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -40,6 +40,8 @@ See [Azure VM sizes with no local temporary disk](../azure-vms-no-temp-disk.yml)
40
40
41
41
Azure Disk Encryption is also not available on [Basic, A-series VMs](https://azure.microsoft.com/pricing/details/virtual-machines/series/), or on virtual machines that do not meet these minimum memory requirements:
42
42
43
+
### Memory requirements
44
+
43
45
| Virtual machine | Minimum memory requirement |
44
46
|--|--|
45
47
| Linux VMs when only encrypting data volumes| 2 GB |
@@ -58,7 +60,6 @@ Azure Disk Encryption is supported on a subset of the [Azure-endorsed Linux dist
58
60
59
61
Linux server distributions that are not endorsed by Azure do not support Azure Disk Encryption; of those that are endorsed, only the following distributions and versions support Azure Disk Encryption:
60
62
61
-
62
63
| Publisher | Offer | SKU | URN | Volume type supported for encryption |
63
64
| --- | --- |--- | --- |
64
65
| Canonical | Ubuntu | 20.04-LTS | Canonical:0001-com-ubuntu-server-focal:20_04-lts:latest| OS and data disk |
@@ -126,7 +127,6 @@ Linux server distributions that are not endorsed by Azure do not support Azure D
126
127
> - ADE support for a particular offer type does not extend beyond the end-of-life date provided by the publisher.
127
128
> - The legacy ADE solution (using AAD credentials) is not recommended for new VMs and is not compatible with RHEL versions later than RHEL 7.8 or with Phyton 3 as default.
128
129
129
-
130
130
## Additional VM requirements
131
131
132
132
Azure Disk Encryption requires the dm-crypt and vfat modules to be present on the system. Removing or disabling vfat from the default image will prevent the system from reading the key volume and obtaining the key needed to unlock the disks on subsequent reboots. System hardening steps that remove the vfat module from the system or enforce expanding the OS mountpoints/folders on data drives are not compatible with Azure Disk Encryption.
@@ -143,14 +143,15 @@ Make sure the /etc/fstab settings are configured properly for mounting. To confi
143
143
Here is an example of the commands used to mount the data disks and create the necessary /etc/fstab entries:
To enable the Azure Disk Encryption feature, the Linux VMs must meet the following network endpoint configuration requirements:
@@ -177,7 +178,6 @@ The following table defines some of the common terms used in Azure disk encrypti
177
178
| Key encryption key (KEK) | The asymmetric key (RSA 2048) that you can use to protect or wrap the secret. You can provide a hardware security module (HSM)-protected key or software-protected key. For more information, see the [Azure Key Vault](https://azure.microsoft.com/services/key-vault/) documentation and [Creating and configuring a key vault for Azure Disk Encryption](disk-encryption-key-vault.md). |
178
179
| PowerShell cmdlets | For more information, see [Azure PowerShell cmdlets](/powershell/azure/). |
179
180
180
-
181
181
## Next steps
182
182
183
183
-[Quickstart - Create and encrypt a Linux VM with Azure CLI ](disk-encryption-cli-quickstart.md)
0 commit comments