Communication between VM OS disk and Compute is unencrypted?

RM 20 Reputation points
2023-02-02T07:53:38.56+00:00

Hi.

I am trying to fix one of Azure Security recommendations "Virtual machines should encrypt temp disks, caches, and data flows between Compute and Storage resources".

This recommendation gets triggered on VM that does not have not temp disk nor data disks. It has single OS disk.
So temp and cache part of recommendation can be ignored. Then i may have problem with data flow between compute and storage.

I know that by default (SSE with PMK) data in transit between VM and DATA disks is not encrypted.

Does communication in transit between OS disk and compute is not encrypted?

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,480 questions
Azure Disk Encryption
Azure Disk Encryption
An Azure service for virtual machines (VMs) that helps address organizational security and compliance requirements by encrypting the VM boot and data disks with keys and policies that are controlled in Azure Key Vault.
162 questions
0 comments
Accepted answer
  1. TP 82,736 Reputation points
    2023-02-02T08:07:31.8766667+00:00

    Hi,

    I suggest enabling Encryption at Host on your VM(s). In this way data flows between host and storage will be encrypted in addition to data at rest being encrypted.

    Below article has instructions to enable it on your VM. Keep in mind if you haven't registered the provider previously it will take several minutes to complete. I would say, it will be done within 15 minutes after you start the registration. The instructions for enabling it on existing VM is all the way at the end of the article:

    https://video2.skills-academy.com/en-us/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell

    For reference, please see this comparison chart that shows different types of encryption and features of each:

    https://video2.skills-academy.com/en-us/azure/virtual-machines/disk-encryption-overview#comparison

    If the above was helpful please click Accept Answer.

    Thanks.

    -TP

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest