Enable Azure Disk Encryption though az-cli
Create Azure Key Vault service
az keyvault create \
--name "kvDemo006" \
--resource-group "demo001" \
--location centralUS \
--enabled-for-disk-encryption True
Enable disk encryption on VM
az vm encryption enable \
--resource-group "kvDemo006" \
--name "devUScWeb003" \
--disk-encryption-keyvault "demo006" \
--volume-type "all"
Show disk encryption
az vm encryption show \
--resource-group "demo006" \
--name "devUScWeb003"`