added warning about disks tab

Author: msmbaldwin

articles/virtual-machines/linux/disk-encryption-portal-quickstart.md

@@ -29,9 +29,17 @@ Sign in to the [Azure portal](https://portal.azure.com).
 1. For **Region**, select the same region you used when making your key vault above (e.g., **East US**).
 1. Make sure the **Size** is *Standard D2s v3*.
 1. Under **Administrator account**, select **Password**. Enter a user name and a password.
-    ![ResourceGroup creation screen](./media/disk-encryption/portal-qs-vm-creation.png)
+
+    :::image type="content" source="./media/disk-encryption/portal-qs-vm-creation.png" alt-text="ResourceGroup creation screen":::
+
+    > [!Warning] The "Disks" tab features an "Encryption Type" field under **Disk options**. This field is used to specify encryption options for the affiliated *storage*account, not to the VMs themselves. 
+    > 
+    > To avoid confusion, we suggest you skip the **Disks* tab entirely while completing this quickstart. 
+
 1. Select the "Management" tab and verify that you have a Diagnostics Storage Account. If you have no storage accounts, select "Create New", give your new account a name, and select "Ok"
-    ![ResourceGroup creation screen](./media/disk-encryption/portal-qs-vm-creation-storage.png)
+
+    :::image type="content" source="./media/disk-encryption/portal-qs-vm-creation-storage.png" alt-text="ResourceGroup creation screen":::
+
 1. Click "Review + Create".
 1. On the **Create a virtual machine** page, you can see the details about the VM you are about to create. When you are ready, select **Create**.
 
@@ -43,19 +51,19 @@ It will take a few minutes for your VM to be deployed. When the deployment is fi
 1. On the left-hand sidebar, select **Disks**.
 1. On the Disks screen, select **Encryption**. 
 
-    ![disks and encryption selection](../media/disk-encryption/portal-qs-disks-to-encryption.png)
+    :::image type="content" source="../media/disk-encryption/portal-qs-disks-to-encryption.png" alt-text="disks and encryption selection":::
 
 1. On the encryption screen, under **Disks to encrypt**, choose **OS and data disks**.
 1. Under **Encryption settings**, choose **Select a key vault and key for encryption**.
 1. On the **Select key from Azure Key Vault** screen, select **Create New**.
 
-    ![disks and encryption selection](../media/disk-encryption/portal-qs-keyvault-create.png)
+    :::image type="content" source="../media/disk-encryption/portal-qs-keyvault-create.png" alt-text="disks and encryption selection":::
 
 1. On the **Create key vault** screen, ensure that the Resource Group is the same as the one you used to create the VM.
 1. Give your key vault a name.  Every key vault across Azure must have an unique name.
 1. On the **Access Policies** tab, check the **Azure Disk Encryption for volume encryption** box.
 
-    ![disks and encryption selection](../media/disk-encryption/portal-qs-keyvault-enable.png)
+    :::image type="content" source="../media/disk-encryption/portal-qs-keyvault-enable.png" alt-text="disks and encryption selection":::
 
 1. Select **Review + create**.  
 1. After the key vault has passed validation, select **Create**. This will return you to the **Select key from Azure Key Vault** screen.