Overview of Microsoft Azure Encryption Preparations

In addition to encrypting regular data partitions on Microsoft Azure, you can also encrypt your Linux root and swap partitions. This ensures that clear-text data never leaves the VM on its way to storage and prevents virtualization and storage administrators from being able to view any sensitive data.

Note:

This discussion assumes that Azure is accessed through https://portal.azure.com. In the material that follows, we have created the VM through the Virtual Machines interface using the Azure Resource Manager (ARM) method. For more information, see Deploying a KeyControl Cluster in Azure Resource Manager (ARM).

To configure a Microsoft Azure VM for root and swap drive encryption:

Step	Task	Notes
1	Remove the VM from Azure, resize the root partition, and attach the OS disk to the VM.	Preparing the Azure VM
2	Recreate the VM in Azure and make a template for future use.	Recreating the VM in Azure
3	Verify that your system meets the prerequisites for encryption.	Verifying the Current VM Configuration
4	Encrypt the root and swap partitions as you would with any Linux server.	Encrypting Linux Root and Swap Drives

HyTrust DataControl v 4.1