Proposed Pull Request Change

📄 Document Links

View on GitHub View on Microsoft Learn

--- title: Creating and configuring a key vault for Azure Disk Encryption description: This article provides steps for creating and configuring a key vault for use with Azure Disk Encryption author: iamwilliew ms.author: wwilliams ms.topic: tutorial ms.service: azure-virtual-machine-scale-sets ms.subservice: disks ms.date: 05/19/2026 ms.update-cycle: 180-days ms.reviewer: mimckitt ms.custom: mimckitt, devx-track-azurecli, devx-track-azurepowershell, portal ms.devlang: azurecli # Customer intent: "As an IT administrator, I want to create and configure a key vault for Azure Disk Encryption, so that I can securely manage disk encryption keys and enhance the security of my virtual machines." --- # Create and configure a key vault for Azure Disk Encryption [!INCLUDE [Azure Disk Encryption retirement notice](~/reusable-content/ce-skilling/azure/includes/security/azure-disk-encryption-retirement.md)] Azure Disk Encryption uses Azure Key Vault to control and manage disk encryption keys and secrets. For more information about key vaults, see [Get started with Azure Key Vault](/azure/key-vault/general/overview) and [Secure your key vault](/azure/key-vault/general/secure-your-key-vault). Creating and configuring a key vault for use with Azure Disk Encryption involves three steps: 1. Creating a resource group, if needed. 2. Creating a key vault. 3. Setting key vault advanced access policies. You may also, if you wish, generate or import a key encryption key (KEK). ## Install tools and connect to Azure The steps in this article can be completed with the [Azure CLI](/cli/azure/), the [Azure PowerShell Az module](/powershell/azure/), or the [Azure portal](https://portal.azure.com). [!INCLUDE [disk-encryption-key-vault](~/reusable-content/ce-skilling/azure/includes/disk-encryption-key-vault.md)] ## Next steps - [Azure Disk Encryption overview](disk-encryption-overview.md) - [Encrypt a Virtual Machine Scale Sets using the Azure CLI](disk-encryption-cli.md) - [Encrypt a Virtual Machine Scale Sets using the Azure PowerShell](disk-encryption-powershell.md)