Convert a Generation 2 virtual machine to a shielded virtual machine
If you already have a Generation 2 virtula machine, you can convert it to a shielded virtual machien by following these steps:
Sign in to the Windows Azure Stack portal as a tenant.
Click New > Standalone Virtual Machine > Quick Create.
Type a name for the virtual machine.
In the Templates list, choose a Generation 2 virtual machine template that is not a shielded template (without a shield icon), provide the credentials, and then click Create VM instance.
Click Configure and verify that the virtual machine state is Stopped/Powered Off.
Click Shield, and then choose a shielding data file.
Click OK.