none
Azure Disk Decryption RRS feed

  • Question

  • Can we decrypt only Data Disk rather than decrypting OS Disk on Windows VM. If we do so, Is there any problem persists.

    Also If we shutdown the system and start the system, will it work properly while booting the machine?

    Tuesday, October 1, 2019 6:09 AM

Answers

  • Yes, it is possible to decrypt only data disk by using -VolumeType switch as mention below.

    Disable-AzureRmVMDiskEncryption -ResourceGroupName "rgname" -VMName "vmname" -VolumeType Data

    If you shutdown the system and start the system, it will work properly without any issue.

    Please 'mark as answer' and vote if this answered your query, so that it can help others in the community.

    Thanks,



    Rohan Islam | Azure Architect

    • Proposed as answer by Rohan Islam Tuesday, October 1, 2019 8:01 AM
    • Marked as answer by uk9777 Wednesday, October 2, 2019 11:22 AM
    Tuesday, October 1, 2019 8:01 AM
  • You can disable encryption using Azure PowerShell, the Azure CLI, or with a Resource Manager template. Disabling data disk encryption on Windows VM when both OS and data disks have been encrypted doesn't work as expected. Disable encryption on all disks instead.

    Kindly let us know if the above helps or you need further assistance on this issue. 

    ------------------------------------------------------------------------------------------

    Do click on "Mark as Answer" and Upvote on the post that helps you, this can be beneficial to other community members



    Tuesday, October 1, 2019 12:46 PM
    Moderator

All replies

  • Yes, it is possible to decrypt only data disk by using -VolumeType switch as mention below.

    Disable-AzureRmVMDiskEncryption -ResourceGroupName "rgname" -VMName "vmname" -VolumeType Data

    If you shutdown the system and start the system, it will work properly without any issue.

    Please 'mark as answer' and vote if this answered your query, so that it can help others in the community.

    Thanks,



    Rohan Islam | Azure Architect

    • Proposed as answer by Rohan Islam Tuesday, October 1, 2019 8:01 AM
    • Marked as answer by uk9777 Wednesday, October 2, 2019 11:22 AM
    Tuesday, October 1, 2019 8:01 AM
  • You can disable encryption using Azure PowerShell, the Azure CLI, or with a Resource Manager template. Disabling data disk encryption on Windows VM when both OS and data disks have been encrypted doesn't work as expected. Disable encryption on all disks instead.

    Kindly let us know if the above helps or you need further assistance on this issue. 

    ------------------------------------------------------------------------------------------

    Do click on "Mark as Answer" and Upvote on the post that helps you, this can be beneficial to other community members



    Tuesday, October 1, 2019 12:46 PM
    Moderator