Proposed Pull Request Change

📄 Document Links

View on GitHub View on Microsoft Learn

--- title: Create and encrypt a Virtual Machine Scale Set with Azure Resource Manager templates description: In this quickstart, you learn how to use Azure Resource Manager templates to create and encrypt a Virtual Machine Scale Set author: iamwilliew ms.author: wwilliams ms.topic: how-to ms.service: azure-virtual-machine-scale-sets ms.subservice: disks ms.date: 05/19/2026 ms.reviewer: mimckitt ms.custom: mimckitt, devx-track-arm-template # Customer intent: As a cloud engineer, I want to use Azure Resource Manager templates to create and encrypt Virtual Machine Scale Sets, so that I can ensure data security and compliance for my running virtual machines. --- # Encrypt Virtual Machine Scale Sets with Azure Resource Manager [!INCLUDE [Azure Disk Encryption retirement notice](~/reusable-content/ce-skilling/azure/includes/security/azure-disk-encryption-retirement.md)] You can encrypt or decrypt Linux Virtual Machine Scale Sets using Azure Resource Manager templates. ## Deploying templates First, select the template that fits your scenario. - [Enable disk encryption on a running Linux Virtual Machine Scale Set](https://github.com/Azure/azure-quickstart-templates/tree/master/quickstarts/microsoft.compute/encrypt-running-vmss-linux) - [Enable disk encryption on a running Windows Virtual Machine Scale Set](https://github.com/Azure/azure-quickstart-templates/tree/master/quickstarts/microsoft.compute/encrypt-running-vmss-windows) - [Deploy a Virtual Machine Scale Set of Linux VMs with a jumpbox and enables encryption on Linux Virtual Machine Scale Sets](https://github.com/Azure/azure-quickstart-templates/tree/master/quickstarts/microsoft.compute/encrypt-vmss-linux-jumpbox) - [Deploy a Virtual Machine Scale Set of Windows VMs with a jumpbox and enables encryption on Windows Virtual Machine Scale Sets](https://github.com/Azure/azure-quickstart-templates/tree/master/quickstarts/microsoft.compute/encrypt-vmss-windows-jumpbox) - [Disable disk encryption on a running Linux Virtual Machine Scale Set](https://github.com/Azure/azure-quickstart-templates/tree/master/quickstarts/microsoft.compute/decrypt-vmss-linux) - [Disable disk encryption on a running Windows Virtual Machine Scale Set](https://github.com/Azure/azure-quickstart-templates/tree/master/quickstarts/microsoft.compute/decrypt-vmss-windows) Then follow these steps: 1. Click **Deploy to Azure**. 2. Fill in the required fields then agree to the terms and conditions. 3. Click **Purchase** to deploy the template. > [!NOTE] > Virtual Machine Scale Set encryption is supported with API version `2017-03-30` onwards. If you are using templates to enable scale set encryption, update the API version for Virtual Machine Scale Sets and the ADE extension inside the template. See this [sample template](https://github.com/Azure/azure-quickstart-templates/blob/master/quickstarts/microsoft.compute/encrypt-running-vmss-windows/azuredeploy.json) for more information. ## Next steps - [Azure Disk Encryption for Virtual Machine Scale Sets](disk-encryption-overview.md) - [Encrypt a Virtual Machine Scale Sets using the Azure CLI](disk-encryption-cli.md) - [Encrypt a Virtual Machine Scale Sets using the Azure PowerShell](disk-encryption-powershell.md) - [Create and configure a key vault for Azure Disk Encryption](disk-encryption-key-vault.md) - [Use Azure Disk Encryption with Virtual Machine Scale Set extension sequencing](disk-encryption-extension-sequencing.md)