This article covers my custom PowerShell Automation script use to set up Azure Disk Encryption (BitLocker) for an Azure Virtual Machine (VM) using Azure Key Vault. The article includes a video demonstration going over the entire process and testing the encryption process on a Windows Virtual Machine (VM).
Video:
Steps in the above video covers;
Running of Initialize-AzureDiskEncryption.ps1 script which automates the steps below;
Running of Add-AzureDiskEncryptionWinVM.ps1 which automates the steps below
Used quick start template to enable disk encryption for a running Virtual Machine (VM)
https://github.com/hhazeley/Azure-V2-Powershell-Scripts/tree/master/DiskEncryption
Microsoft Azure article covering referencing steps in video
https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption
Disk Encryption Series
http://hazelnest.com/blog/blog/tag/disk-encryption