When 'enabledfordiskencryption' is True, networkAcLs.bypass must include "Azure Services".

Satyam 25

User's image

I am trying to create a key vault and selected only the option Azure Disk encryption for volume encryption under Access policy.

For networking it was left to default i.e. all networks. But the deployment is failing for key vault. I have attached the screenshot of the error.

For reference I am following the process of "Create and encrypt a Windows virtual machine with the Azure portal"

Raja Pothuraju 7,990 Reputation points Microsoft Vendor

2024-08-13T21:04:01.61+00:00

Hello @Satyam,

Thank you for posting your query on Microsoft Q&A.

I am checking this and will get back to you with further inputs.

Thanks,
Raja Pothuraju.
Raja Pothuraju 7,990 Reputation points Microsoft Vendor

2024-08-18T17:20:48.0033333+00:00

Hello @Satyam,

Thank you for your time and patience.

It seems you're trying to create a Key Vault and encountered a 'BadRequest' error because 'enabledForDeployment' is set to true without including 'AzureServices' in 'networkAcls.bypass'.

To resolve this issue, I recommend modifying the network settings to 'selected networks', enabling 'allow trusted services', and then applying these changes to your environment.

Please let me know if this helps resolve the issue.

Thanks,
Raja Pothuraju.
Raja Pothuraju 7,990 Reputation points Microsoft Vendor

2024-08-20T02:05:28.4666667+00:00

Hello @Satyam,

Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.
Raja Pothuraju 7,990 Reputation points Microsoft Vendor

2024-08-21T01:00:59.6866667+00:00

Hello @Sean Charles Pugosa,

Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.

1 answer

Elshan Mammadli 5 Reputation points

2024-09-18T19:47:27.81+00:00

Hi @Raja Pothuraju

I can confirm that I had the same error and following your suggestion helped.

Steps I took:

I went to Key Valut>Netrowking and selected "Allow public access from specific virtual networks and IP addresses" After that checked the box below "Allow trusted Microsoft services to bypass this firewall"
Please sign in to rate this answer.

1 person found this answer helpful.
Raja Pothuraju 7,990 Reputation points Microsoft Vendor

2024-09-18T23:48:24.8233333+00:00

Hello @Elshan Mammadli,

That’s great to hear! Thank you for sharing this information.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

When 'enabledfordiskencryption' is True, networkAcLs.bypass must include "Azure Services".

1 answer

Your answer