EncryptionAtHost is enabled so why are the Advisor Recommendations saying it isn't?

Question

I properly registered EncryptionAtHost to our subscription, which took a few minutes. I then created a VM with EncryptionAtHost enabled during the creation process. It has been over 3 weeks and the Advisor is still showing the following recommendation: "Windows virtual machines should enable Azure Disk Encryption or EncryptionAtHost." How can I be certain that EncryptionAtHost is working properly if I am still seeing this Advisor recommendation?

Answer 1

Hi Thomas Leland
Azure Advisory Recommending  "Windows virtual machines should enable Azure Disk Encryption or EncryptionAtHost."

You are already Enabled   EncryptionAtHost, Just It is Recommending   for Azure Disk Encryption.

Navigate to the VM → Under Disks, go to Additional Settings → Under Encryption settings --> Check if disks to encrypt are set None.

If it is set to None, then Azure Advisory Recommending for Azure Disk Encryption.

Azure Disk Encryption (ADE) vs. Encryption at Host (EAH) Both Azure Disk Encryption (ADE) and Encryption at Host (EAH) are encryption mechanisms in Azure, but they differ in implementation, scope, and use cases.

 Azure Disk Encryption (ADE): Encrypts OS and Data disks using BitLocker (Windows) or dm-crypt (Linux)

Encryption at Host (EAH):  Encrypts temporary disks, OS disks, and data disks at the host level

Please follow the below steps to verify Encryption at Host Level is enabled

 

Navigate to the VM → Under Disks, go to Additional Settings → Check if Encryption at Host Level is enabled

Please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.