Azure Disk Encryption - Not applicable resources

%3CLINGO-SUB%20id%3D%22lingo-sub-2058338%22%20slang%3D%22en-US%22%3EAzure%20Disk%20Encryption%20-%20Not%20applicable%20resources%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2058338%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20around%20350%20IaaS%20vms%20that%20are%20showing%20up%20as%20Not%20Applicable%20within%20ASC%20across%20140ish%20subs.%20I%20cannot%20seem%20to%20pin%20down%20any%20rhyme%20or%20reason%20why%20these%20machines%20report%20in%20this%20way.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20is%20an%20example%20of%20two%20VMs%20for%20one%20sub%20and%20what%20it%20looks%20like%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22nathan_mitten_rpa_0-1610570352826.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F246228iBE5D15124B4C0954%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22nathan_mitten_rpa_0-1610570352826.png%22%20alt%3D%22nathan_mitten_rpa_0-1610570352826.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20VMs%20are%20on%20supported%20versions%20of%20windows%2C%20they%20don't%20have%20ADE%20extension%20installed%2C%20they%20are%20not%20on%20a%20domain%2C%20they%20are%20V1%20VMs%2C%20there%20isn't%20any%20other%20software%20installed%20that%20would%20be%20doing%20encryption.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20yet%20to%20find%20a%20resource%20that%20reports%20in%20in%20this%20state%20that%20actually%20has%20disk%20encryption%20enabled%2C%20so%20just%20trying%20to%20see%20if%20anyone%20has%20other%20thoughts%20on%20why%20ASC%20isn't%20reporting%20it%20as%20such.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2058363%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Disk%20Encryption%20-%20Not%20applicable%20resources%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2058363%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Nathan%2C%3C%2FP%3E%0A%3CP%3EPlease%20check%20if%20anything%20on%20this%20list%20is%20applicable%20to%20your%20VMs%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-machines%2Fwindows%2Fdisk-encryption-windows%23unsupported-scenarios%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Disk%20Encryption%20scenarios%20on%20Windows%20VMs%20-%20Azure%20Virtual%20Machines%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EThank%20you.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2058427%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Disk%20Encryption%20-%20Not%20applicable%20resources%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2058427%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F117322%22%20target%3D%22_blank%22%3E%40Stanislav%20Belov%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20don't%20believe%20any%20of%20those%20apply.%20In%20some%20cases%20ADE%20is%20on%20the%20VM%20and%20has%20encrypted%20the%20OS%20disk%2C%20but%20it%20isn't%20applied%20to%20the%20data%20disk%20(at%20least%20in%20the%20portal%20it%20doesn't%20register%20ADE%20on%20the%20disk)%2C%20but%20it%20still%20shows%20up%20as%20N%2FA%20instead%20of%20ADE%20missing.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2061837%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Disk%20Encryption%20-%20Not%20applicable%20resources%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2061837%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20all%20similar%20cases%20we%20have%20seen%20its%20been%20something%20from%20that%20list%20that%20prevented%20ADE%20from%20being%20deployed%20to%20those%20VMs.%20Please%20review%20this%20as%20well%3A%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fen-us%252Fazure%252Fvirtual-machines%252Flinux%252Fdisk-encryption-overview%2523supported-vms-and-operating-systems%26amp%3Bdata%3D04%257C01%257CStanislav.Belov%2540microsoft.com%257C26b50be551c740143a4308d8b89df7a5%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637462335893043243%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C1000%26amp%3Bsdata%3DRdL0lHlZDNzcuGH8It5qKdFmWj3VF1Co8dia%252FNbzLlI%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EEnable%20Azure%20Disk%20Encryption%20for%20Linux%20VMs%20-%20Azure%20Virtual%20Machines%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fen-us%252Fazure%252Fvirtual-machines%252Fwindows%252Fdisk-encryption-overview%2523supported-vms-and-operating-systems%26amp%3Bdata%3D04%257C01%257CStanislav.Belov%2540microsoft.com%257C26b50be551c740143a4308d8b89df7a5%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637462335893053238%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C1000%26amp%3Bsdata%3DgRp9zxoLkoGce8rZvx0fo2LH%252FCDOMvybXGE9EKoKP8s%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EEnable%20Azure%20Disk%20Encryption%20for%20Windows%20VMs%20-%20Azure%20Virtual%20Machines%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EIf%20you%20still%20have%20hard%20time%20identifying%20the%20root%20cause%2C%20please%20consider%20raising%20a%20support%20ticket%20so%20that%20our%20engineers%20can%20help%20you%20troubleshoot%20the%20issue.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EP.S.%20We%20are%20working%20on%20adding%20a%20reason%20why%20certain%20recommendations%20are%20not%20applicable%20to%20certain%20resources.%20No%20solid%20timeframe%20when%20it%20is%20going%20to%20be%20available%20though.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThank%20you.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

I have around 350 IaaS vms that are showing up as Not Applicable within ASC across 140ish subs. I cannot seem to pin down any rhyme or reason why these machines report in this way. 

 

Here is an example of two VMs for one sub and what it looks like:

 

nathan_mitten_rpa_0-1610570352826.png

 

The VMs are on supported versions of windows, they don't have ADE extension installed, they are not on a domain, they are V1 VMs, there isn't any other software installed that would be doing encryption.

 

I've yet to find a resource that reports in in this state that actually has disk encryption enabled, so just trying to see if anyone has other thoughts on why ASC isn't reporting it as such.

 

Thanks

3 Replies

Hi Nathan,

Please check if anything on this list is applicable to your VMs: Azure Disk Encryption scenarios on Windows VMs - Azure Virtual Machines | Microsoft Docs

Thank you.

@Stanislav Belov 

I don't believe any of those apply. In some cases ADE is on the VM and has encrypted the OS disk, but it isn't applied to the data disk (at least in the portal it doesn't register ADE on the disk), but it still shows up as N/A instead of ADE missing.

In all similar cases we have seen its been something from that list that prevented ADE from being deployed to those VMs. Please review this as well:

Enable Azure Disk Encryption for Linux VMs - Azure Virtual Machines | Microsoft Docs

Enable Azure Disk Encryption for Windows VMs - Azure Virtual Machines | Microsoft Docs

If you still have hard time identifying the root cause, please consider raising a support ticket so that our engineers can help you troubleshoot the issue.

 

P.S. We are working on adding a reason why certain recommendations are not applicable to certain resources. No solid timeframe when it is going to be available though.

 

Thank you.