Prerequisites
- An Azure Subscription
- An Azure Key Vault
- An Azure Virtual Machine
- NOTE #1: Only Standard or higher VMs support disk encryption
- NOTE #2: The VM and Key Vault must be in the same region
My Virtual Machine Configuration
- Image: Windows Server 2019 Datacenter
- Size: Standard B1s (1vcpu, 1GiB memory)
- OS disk type: Standard SSD
- Cost: $10.42/month
Create a Key
- https://portal.azure.com
- Key Vaults
- Select your Key Vault
- Settings\Keys
- Generate/Import
- Create

Key Created & Enabled

OS Disk Before Encryption

Encrypt Disk using Azure Cloud Shell
- https://portal.azure.com
- Launch the Azure Cloud Shell
- Ensure the environment is set to PowerShell
- Execute the commands shown below
- Alternatively, run the script from the Git link provided below
- NOTE: Encryption requires approximately 15 minutes to complete

OS Disk After Encryption
