Udemy*Azure|Micrososft Azure|Azure|Az-104|Azure admin|Azure administrator| Video -122 |Azure Disk Encryption(ADE)|Demo- Azure Disk Encryption(Ade)

So, in this blog, we are going to see about the topic, Azure Disk encryption(ADE) in the azure basically. Now, in this lesson, we will see that, how the Azure Disk encryption works all right. So, once again , You can see that, I m inside the Vm basically, under the Disk . I have by default OS disk and by default , this is encrypted with the sse with pmk right.

Right now, on top of this, I want to add a Azure disk encryption basically. Now, for that I want to create the Azure Key Vault basically. So, i have created the Azurekey vault . So already I have created a Vaultade1009 basically.

So, I already have created the 1 Azure key vault, and the key vault name, that I provided is the Vaultade1009 basically. And here, if I go to the access policies, you can see that how this key vault can be used.

And the one of the option, here is that Azure disk encryption for the volume encryption. So, if you scroll down over here, and here you can see that you can see that the Azure disk encryption for the volume encryption. So, you need to select this option, Azure disk encryption for the Volume encryption. So, make sure, you select this Option, like the Azure disk encryption for the Volume encryption.

Note:- So, here you need to select this option , that is the azure disk encryption with the volume encryption. So , i will select this option, go to the save option basically. So, if you scroll down above, you can see that , there it is showing above the permission model, so here we have the 2 options , one is the vault access policy and the another is the role-based access control basically. So, here you need to select this Vault access policy option over there. So, I will select this and go to the save option over there basically and then Now, once this is updated, i will go into the keys and I will create a new key over there.

I will just create a new key here. Remember this is the name of the Azure key vault is the vaultade1009. now, coming back to the Vm here, If i go to the additional settings here, you can see that I have the option to disk encrypt what exactly I want to encrypt, but I want to encrypt the OS or I want to encrypt the OS as well as the Data Disk.

Ultra disk

Enable the Ultra Disk compatibility — YES|NO — No

Encryption at Host

Encryption at Host — YES|NO — No

Encryption Settings

Disk to Encrypt — OS Disk # Note, so here you need to select the OS disk over there in the Disk to Encrypt field that is showing you over there.

So, right now, I have the Os disk only basically. So, i will select it and I will selected and I will select my key Vault

Key Vault: Vaultade1009

Key: VmKey

Version: Select your key version by using the drop down button

If you remember that this is the key vault name , that we create is the vaultade1009 and I already have the 1 key here and this has a version here.

So, I will select this and I will click on the save option over there that is showing me over there. You can see the save the option that is showing over there in the top right.

And this will enable it to add the your disk encryption. Now, you need to remember that, to encrypt this, your Virtual Machines should be in a running state. So, if i go back to my virtual machine here, now this will discard my changes. i don't want to discard it but let me open this in a another tab, if i go to my virtual machines here.

So, currently we are working on the vm -00004 for my virtual machine, is right now working in a start condition, right So, the virtual machine, should be running.

And when you actually change the setting here, if your virtual machine is running. if you are having an active session. you will actually loose that session right, all right.

You can see that this has successfully updated the encryption settings here. Now, if i go back to my virtual machine back, you can see that I have the ADE along with the SSE right. So both a rest as well as the transit the data is encrypted now. And I will actually connect with this Virtual machine and I can show you that how the Disk and the virtual machine shows that this is lock.

So, let me rdp into the virtual machine, actually let me rdp and come back and as soon as soon as I m able to login in right all right.

So, I logged in into the Virtual machine basically and I open my window browser here and you can see that my OS drive, that is the C drive, you can see the lock symbol over here. This shows that this Volume is encrypted basically.

So, you can see that how, not just at the rest but within my vm, the volume also encrypted. this is also encrypted basically.

And you can see that , how easy this is to implement (ADE ) basically . All right