Create Azure Key Vault service
az keyvault create \
 --name "kvDemo006" \
 --resource-group "demo001" \
 --location centralUS \
 --enabled-for-disk-encryption True
Enable disk encryption on VM
az vm encryption enable \
 --resource-group "kvDemo006" \
 --name "devUScWeb003" \
 --disk-encryption-keyvault "demo006" \
 --volume-type "all"
Show disk encryption
az vm encryption show \
 --resource-group "demo006" \
 --name "devUScWeb003"`