Azure Disk Encryption failed for specific VMs

Khushi Joshi 21 Reputation points
2024-12-17T09:05:38.18+00:00
  • Hello All,

I am facing below error while enable the Disk Encryption on Azure VM. with the same resource group other vms are working properly and get encrypted.
Error

Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.BitlockerFailedToSendEncryptionSettingsException: The fault reason was: '0xc142506f RUNTIME_E_KEYVAULT_SECRET_WRAP_WITH_KEK_FAILED Key vault secret wrap with key encryption key failed.'. at Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.WireProtocol.WireProtocolMessage.SendEncryptionSettingsToHost() in C:__w\1\s\src\BitLocker\BitlockerIaasVMExtension\WireProtocol\WireProtocolMessage.cs:line 210 at Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.BitlockerExtension.SendEncryptionSettingsToHostV3(VmEncryptionSettings vmSettings) in C:__w\1\s\src\BitLocker\BitlockerIaasVMExtension\BitlockerExtension.cs:line 1092'. More information on troubleshooting is available at

User's image

All operation are correctly configured. with proper rights.

User's image

User's image

Azure Disk Encryption
Azure Disk Encryption
An Azure service for virtual machines (VMs) that helps address organizational security and compliance requirements by encrypting the VM boot and data disks with keys and policies that are controlled in Azure Key Vault.
177 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Khushi Joshi 21 Reputation points
    2024-12-17T11:01:08.7366667+00:00

    Hello All,

    This has been resolved, if you are facing the issue in OS 2022 then you should change the Key Configuration from size 2048 to higher.

    After done that this has been resolved.

    0 comments No comments

  2. Hari Babu Vattepally 1,195 Reputation points Microsoft Vendor
    2024-12-17T11:31:14.1+00:00

    Hi @Khushi Joshi

    I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this!Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer. Accepted answers show up at the top, resulting in improved discoverability for others.

    Issue: Azure Disk Encryption failed for specific VMs

    Solution: If you encounter the issue in OS 2022, then it is recommended to increase the Key Configuration from size 2048 to higher values.

    Here we have discussion and solution on the similar issue in SO

    If your issue remains unresolved or have further questions, please let us know in the comments how we can assist. We are here to help you and strive to make your experience better and greatly value your feedback.

    Please let us know if you have any further queries. I’m happy to assist you further. 


    Please do consider to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members. 

    User's image


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.