In order to encrypt a Linux system device (such as /root, swap, or /home) in Azure, you need to partition the Linux OS disk so that it has a separate boot partition. Then you need to format the new boot partition and tell Linux to boot from that partition. To do so, perform the following tasks:
Step | Description | Details |
|---|---|---|
1 | Make sure the Linux VM meets the Cryptographic Security Platform Vault encryption requirements. | |
2 | Partition the Linux OS disk then format and mount the new boot partition. | |
3 | Verify the VM's configuration. | |
4 | Encrypt one or more Linux system devices. |