Azure Storage - #5 - Azure Disk Encryption

Learn all about Azure Disk Encryption today at The Azure Academy
github.com/DeanCefola/PowerSh...
github.com/DeanCefola/WebDemo
Patreon - / azureacademy
Twitter - / msazureacademy
LinkedIn- / dean-cefola-2902934b
WebSite - msazureacademy.com
What is Azure Disk Encryption - 0:33
Azure Docs on ADE - 2:25
ADE with Bash on Linux - 3:34
Methods to implement ADE - 8:12
ADE with PowerShell on Win - 11:22
ADE Setup in the Portal - 15:12
ADE with Arm Templates:
Quick Start Template in Azure Portal - 17:00
ARM Template in Visual Studio - 20:04
Bitlocker on Azure VMs...What you need to know - 23:13
Whats Next...?
#TheAzureAcademy #AzureFundamentals #AzureStorage

[@petminutkaslubcho]

Wonderful lecture. Very user friendly explanations on all topics. It's a rare gem!

[@AzureAcademy]

Thanks for the feedback, please subscribe and share The Azure Academy with others to help us keep growing, and comment on what you want to see in our next video

[@ssarwat2233]

thanks so much for the lament explanation in the beginning of how this even works.

[@AzureAcademy]

Anytime!

[@omkarnadkarni4765]

Very clear explanation.

[@AzureAcademy]

Thanks!

[@njmvlgkvrakvamkv]

Best instructor, best video, very well spoken, very well explained, a pleasure to watch, please carry on making more videos!

[@AzureAcademy]

Thanks Nelson! Let me know what other topics you are interested in and what you want me to make a video for next 😁

[@Deekudla]

My long search ends here. Thanks a lot for sharing information.

[@AzureAcademy]

Glad it was helpful! How will you use it? Windows, or Linux, OS only or OS and Data?

[@Deekudla]

​@@AzureAcademy I am using it on Windows OS and Data Disk. Let me explain the real-time scenario: We have a larger number of team members who create VMs without encryption and "Azure Security Center" warns us with a list of unencrypted VMs. So next step is to prepare a script which creates VMs' with default settings like encryption ON so that there won't be any unencrypted VMs running in our org. I have created a process where in our team will use this script to create a VM!

[@AzureAcademy]

+sounds good Deepak k

[@karthikexplorincity]

Best azure disk encryption video i have seen so far.. thank you well explained..

[@AzureAcademy]

Thanks!

[@edsonsoaressiqueira7620]

Really nice job!

[@AzureAcademy]

Thank you!

[@richardwaldron1684]

A really informative video. A lot of training videos I've seen confirmed the default SSE and the fact you can encrypt disks, but never the reason why you need to if the disk is in that encrypted storage account. Thanks for joining the dots, these details make all the difference to my knowledge and practical application. Cheers!

[@AzureAcademy]

happy to help Richard! Let me know what other videos we can make for you.

[@cloudpachehra1113]

Your videos are so wonderful always... Just wanted to say I wait for your new feature videos that's more helpful then announcements.... Thanks for sharing

[@AzureAcademy]

Thanks for the feedback! We try to keep our videos focused on learning at every level of Azure. Stay Tuned for an upcoming video showing off a NEW way of doing Azure Disk Encryption too!

[@SecurityMadeSimple]

Really fantastic videos mate. Great lecture. Only thing possibly that i would like to see is there is a demo via the portal along with the powershell/cli as shown here

[@AzureAcademy]

Thanks for the feedback Sam! There is a demo of it...there is a new way to do disk encryption that I will show soon...stay tuned

[@riteshtripathi5835]

very precise and informative video.. Kudos to the instructor!!

[@AzureAcademy]

Thanks! 👍👍

[@mosksky]

Dean u ROCK!!!

[@AzureAcademy]

Thanks...going to Ignite?

[@cosmicdreams7739]

wow all videos are great. i gotta go back and thumbs up and leave comments on each one. thank you!!!

[@AzureAcademy]

LOL...Thanks I appreciate it!

[@avisin28]

Just awesome

[@AzureAcademy]

Thanks! let us know what else you are interested in

[@avisin28]

We have servers on ADE 2.0 due to which I was unable to apply ASR and after watching your video, I downgraded Disk to ADE 1.0 and now ASR is working. Thanks for that. I have been watching your other videos in ARM templates as if now. My Focus area is Automation and PaaS in Azure. So if you contribute more in Automation that will be great.

[@AzureAcademy]

Thanks for the feedback... I will be doing a video on Windows Virtual Desktop deployment through ARM Templates soon...besides that, is there something specific you are looking for in Automation?

[@ajdinzutic]

do you recommend to use the same principal app for a.e. the encryption and the WVD Creation? In the keyvault, can those passwords be changed like each 6 months or so?

[@AzureAcademy]

generally service principals are single purpose so that they have the least privileges possible

[@maryvacherweill8505]

Now that my AVD is 100% in the cloud using Entra Id Authentication and NO AD DS of any kind, for Windows 11 (Enterprise Multi-Session + 365) I am ONLY using BitLocker (NO Azure Disk Encryption). There appears to be no way to import the key into Azure Vault. Do you know if that is on the Microsoft Road Map? Or maybe you know a workaround?

[@AzureAcademy]

The Bitlocker keys can ONLY be stored in the Keyvault if you use The Azure Disk Encryption Service. If you want to store the keys in Entra ID with the device...that is completely different, which is drive encryption or Intune encryption which stores the keys in Entra

[@vdibuzz]

any script to encrypt SSE with CMK for bulk Vm disks (needed for encrypting WVD host pools)

[@AzureAcademy]

All storage in Azure is encrypted at rest, the Azure disk encryption is a cloud managed bitlocker/dmcrypt OS level encryption...you can totally script it out to do it in bulk but I am not aware of code that is already written for this...

[@ajdinzutic]

can i hide safely the F Drive? or would something happend?

[@AzureAcademy]

not that I know of...but you can use GPO so that people cannot write to the F:\

[@vaibhavawati1216]

How can we restore data from Encrypted Disk?

[@AzureAcademy]

Same as you would do with a bit locker or DM Crypt encrypted disk anywhere...you need the decryption keys and in Azure those should be in the keyvault

[@vaibhavawati1216]

@@AzureAcademy Ok Noted .. Thanks for sharing such usefull and usecase base knowledge, glad that I am getting it free of cost

[@AzureAcademy]

@@vaibhavawati1216 👍👍