Technical Tip: Enabling disk encryption on Azure with FortiGate VM

[avinash_v]

Description	The article describes how to enable disk encryption on Azure with FortiGate VM.
Scope	FortiGate VM on Azure.
Solution	Execute the below command on Azure Powershell to register the encryption feature for the resource/subscription: Register-AzProviderFeature -FeatureName "EncryptionAtHost" -ProviderNamespace "Microsoft.Compute" Check whether the registration state is 'registered', takes a few minutes: Get-AzProviderFeature -FeatureName "EncryptionAtHost" -ProviderNamespace "Microsoft.Compute" Then launch the VM, and select 'encryption at host' in the 'disks' section of 'create a VM'. As shown in the Azure documentation, there are specific restrictions on when Azure Disc Encryption can be enabled, for example, only new VMs deployed after enabling this feature will be automatically encrypted. For a full list of the restrictions, refer to the Azure document at the end of this article. On an existing VM, additional steps as mentioned below, should be followed to enable encryption: Take a backup of the configuration file and take a VM snapshot. See [2]. Shut down the VM. Apply encryption settings. And then bring up the VM. Related document: [1] Use the Azure portal to enable end-to-end encryption using encryption at host [2] Create a snapshot of a virtual hard disk