Forum Discussion

Trevor Wilcockson

Copper Contributor

Aug 21, 2017

Disk Encryption

Hi, Does any know if you can encrypt a disk when using the 2016-Datacenter-Server-Core image from Microsoft? When I try it comes up with an error "Failed to configure bitlocker as expected. Excep...

virtual machine

Iron Contributor

Aug 21, 2017

Did you follow this guide https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption

Trevor Wilcockson

Copper Contributor

Aug 21, 2017

Hi,

Yes I have followed this guide but it still reports the same error message.

Trevor

Kent Gaardmand
Iron Contributor
Aug 21, 2017
Also i found another guide that i prefer to the last one i sent.
https://docs.microsoft.com/en-us/azure/security-center/security-center-disk-encryption
- Trevor Wilcockson
  Copper Contributor
  Aug 23, 2017
  Hi,
  
  I tried all that. It would appear disk encryption does not work on the 2016 server core image as I used the 2016-Datacenter image and the disk encryption worked fine.
  
  Trevor
  - Kent Gaardmand
    Iron Contributor
    Aug 23, 2017
    I found this, it has a troubleshooting 2016 core.
    it appears a feature is missing from core by default.
    https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-tsg#troubleshooting-windows-server-2016-server-core
    
    On Windows Server 2016 Server Core, the bdehdcfg component is not available by default. This component is required by Azure Disk Encryption.
Kent Gaardmand
Iron Contributor
Aug 21, 2017
Ok, did the machine reboot once you ran the commands ?
I have had a few problematic encounters getting this to work on some VM's as well.
they would constantly state a reboot was required, and this just went on.

I ended up disabling the encyption using Azure Powershell commands, and disabling it in the OS.
then rerunning the guide.

one thing you could verify, is the the drive containing the encryption key present ?

Resources