Convert BEK Disk Encryption to KEK for Azure Recovery Services A common desire is to convert Azure IaaS VM’s that were encrypted using only BEK to also using KEK in order to take advantage of Azure Recovery Services. In this scenario, you do not need to decrypt your VM, rather simply enable with a KEK…
Month: November 2016
Azure Disk Encryption – How to recover BEK file from Azure Key Vault
In today’s blog, we will demonstrate behavior of Azure Disk Encryption Extension and how it integrates with Key Vault and the Azure Platform to create and read the (BEK) secrets. It will also describe how you can recover the BEK file from the Key Vault in a scenario where you need to recover the data…