Azure Virtual Desktop Support for Trusted Launch Virtual Machines

Published Jan 07 2022 09:54 AM 1,525 Views
Microsoft

We are excited to officially announce Azure Virtual Desktop support for Trusted Launch virtual machines! Deploying Trusted Launch virtual machines in your Azure Virtual Desktop environment allows you to improve the security posture of your virtual machines by protecting against advanced and persistent attack techniques. The key benefits are as follows:

 

  • Protect against the installation of malware-based rootkits and boot kits with Secure Boot.
  • Provide your VM with its own dedicated Trusted Platform Module instance with a vTPM.
  • Protect Windows kernel-mode processes against injection and execution of malicious or unverified code with Hypervisor Code Integrity.
  • Isolate and protect secrets so that only privileged system software can access them with Windows Defender Credential Guard.
  • Ability to perform feature updates when using Windows 11 Enterprise or Windows 11 Enterprise multi-session.

 

There is now a Trusted launch virtual machines option under Security type when adding virtual machines in the host pool UI:

 

jushiah_0-1641426726813.png

 

When the Trusted Launch virtual machines Security type is selected, you will also have the option to enable secure boot and vTPM:

 

jushiah_1-1641426726819.png

 

 

To learn more about Trusted Launch virtual machines, please visit here.

 

 

Co-Authors
Version history
Last update:
‎Jan 07 2022 09:39 AM
Updated by: