vRA 8 - Azure Disk Encryption Set

[emacintosh]

We currently use an XaaS workflow to build Azure servers, which ultimately uses an ARM template.  And we're evaluating whether we can maybe replace that process with a Cloud Template, and use vRA as it's designed to be used.

But one thing we do in the ARM template is set the Disk Encrtyption Set on the OS disk.  I haven't been able to find a way to handle that with the Azure machine in a cloud template.  And i'm not sure it can be configured post-provisioning.  Does anyone know if that's possible? 

It also seems like the ability to rename the boot disk isn't working (8.4.2) or maybe the bootDiskName property means something else.

[xian_ · Accepted solution]

I don't use it, but it is available via Storage Profiles:

You can choose storage profile via its capability tags on the cloud template.

[emacintosh]

Thanks, didn't even think to look there.  

[emacintosh]

That does work, but I'm not sure it will work for us.  Seems like it's one per storage profile.  We have a ton of encryption sets across multiple resource groups and subscriptions.

Still feeling kinda handcuffed with the oob Azure functionality....but then again maybe i'm not using it right.

[Thelemanu]

Hello, the XaaS workflow you are using to leverage the ARM template. What does it contain ? How do you execute the ARM template ? Any reference/advise is welcome

Tks

[emacintosh]

In our environment, most of our "work" is done from our powershell script host. 

So in this case, the XaaS item will grab the inputs from the user and then the correpsonding worklow will turn around and call a powershell script to actually build from the arm template (using New-AzResourceGroupDeployment).  A bit more complicated than that of course, but that's the gist.  

Hope that helps a little.

[Thelemanu]

Thank you it does help

that is the only PowerShell step we intend to do, for now. So adding a PowerShell script host, only for this ... Any experience with using PowerCli script engine of "Scriptable Tasks" ?

[xian_]

Check https://kuklis.github.io/cma/post/vra8-azure-powershell/