Preparing a Linux System Device for Encryption in Azure

In order to encrypt a Linux system device (such as /root, swap, or /home) in Azure, you need to partition the Linux OS disk so that it has a separate boot partition. Then you need to format the new boot partition and tell Linux to boot from that partition. To do so, perform the following tasks:

Step

Description

Details

1 

Make sure the Linux VM meets the KeyControl Vault encryption requirements.

Prerequisites and Restrictions

2 

Partition the Linux OS disk then format and mount the new boot partition.

Partitioning a Linux OS Disk in Azure

3 

Verify the VM's configuration.

Verifying the Current VM Configuration

4 

Encrypt one or more Linux system devices.

Encrypting Linux System Devices in Azure