Disk encryption with customer key

Question

Hello guys,

I've followed this article (https://learn.microsoft.com/en-us/azure/virtual-machines/disks-enable-customer-managed-keys-portal) to configure KeyVault to store customer key and apply this CMK to VM OS disk and it would appear that the procedure was successful (in the portal I can see my disks with "SSE with CMK" encryption) but if I try to check the encryption status with this command:

Get-AzVmDiskEncryptionStatus -ResourceGroupName "myRG" -VMName "MyVM"

the output is:

OsVolumeEncrypted : NotEncrypted

DataVolumesEncrypted : NotEncrypted

OsVolumeEncryptionSettings :

ProgressMessage : No Encryption extension or metadata found on the VM

Is this the correct command to verify the encryption status of the VM disks? or I need to execute some other tasks to accomplish this procedure?

thanks!

Answer 1

Hi Andrea,

Please use command similar to below:

(Get-AzDisk -ResourceGroupName myRG -DiskName myDisk).Encryption

The command you were using is for Azure Disk Encryption (ADE) which is different. You are using Server Side Encryption (SSE).

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP