This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 50%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
We have a Linux virtual machine in Tenant A with its OS disk encrypted using Azure Disk Encryption and a Key Vault in the same tenant. Our goal is to migrate this virtual machine from Tenant A to Tenant B. However, decrypting the Linux OS disk is not a supported process according to Microsoft documentation. When we attempt to convert the disk to a VHD and create a new VM, it enters dracut mode. Can someone help me to achieve this scenario?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 49%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Hello @saravana srinivas chintapatla
Please take a snapshot of the encrypted disk, then create a new disk from the snapshot, which will no longer be encrypted. After that, convert the newly created unencrypted disk to a VHD. You can then use this VHD to create a new VM in Tenant B without any issues.
We did try above steps. Virtual machine created from VHD is entering into the dracut mode and agent status is forever not ready.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(313.6, 35%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
Hi saravana srinivas chintapatla,
Thank you for reaching out to us on the Microsoft Q&A forum.
We are looking into it and will get back to you soon.
Hi saravana srinivas chintapatla,
Firstly, there is no direct migration approach in Azure for tenant-to-tenant migrations. Let me explain how it works: a tenant contains identities but not resources (such as VMs, storage accounts, key vaults, etc.). Resources are always created under subscriptions, and a subscription can be associated with only one tenant at any given time. Therefore, when you say, "migrate a VM from one tenant to another," you are referring to moving the VM from a subscription associated with one tenant to another subscription associated with a different tenant.
Please find the document for more information: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory
Azure to azure replication using azure site recovery and migration can be a solution, as it can replicate ADE encrypted Linux VMs between subscriptions, provided he can bring both subscriptions under one tenant. Else you need to rebuild the VM from scratch and copy the data disks.
Note: A2A replication is not supported in cross tenant scenarios.
Support matrix for A2A
If an answer has been helpful, please consider accepting the answer and "Upvote" to help increase visibility of this question for other members of the Microsoft Q&A community.
Thank you.
Hi saravana srinivas chintapatla,
Just checking in to see if you have got a chance to see the answer posted in resolving the issue.
If the information is helpful, please consider by clicking the "Accept answer and Upvote" on the post.
Thank you.
Hi saravana srinivas chintapatla,
Just I wanted to see if you had to chance to review my answer If you found helpful, could you please click the "Accept answer and Upvote" on my post to help increase visibility of this question for other members of the Microsoft Q&A community.
Thank you.