Azure Disk Encryption or EncryptionAtHost

Question

Hello,

I have defender recommendation "Windows virtual machines should enable Azure Disk Encryption or EncryptionAtHost"

Anyone know if we do this, there are any extra cost?

Answer 1

Hi Handian Sudianto,
Welcome to Microsoft Q&A Forum. Thanks for posting you query here!
Enabling Azure Disk Encryption itself does not incur additional costs. However, there are charges associated with using Azure Key Vault for managing the encryption keys

For EncryptionAtHost, if you use Platform Managed Keys (PMK), there is no additional cost. But if you opt for Customer Managed Keys (CMK), you will incur costs related to Azure Key Vault

For more information:
https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-faq
https://learn.microsoft.com/en-us/azure/virtual-machines/linux/disks-enable-host-based-encryption-cli

---

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.