---
names:
  full: "[LEGACY] Azure Virtual Machine VHDs are not encrypted"
  contextual: "[LEGACY] VHDs are not encrypted"
description: "VHD (Virtual Hard Disks) are stored in blob storage and are the old-style\
  \ disks that were attached to Virtual Machines. The blob VHD was then leased to\
  \ the VM. By default, storage accounts are not encrypted, and Microsoft Defender\
  \ will then recommend that the OS disks should be encrypted."
impossible: true
type: COMPLIANCE_POLICY
categories:
  - SECURITY
frameworkMappings:
  - "/frameworks/cis-azure-v2.1.0/07/07"
  - "/frameworks/cis-azure-v3.0.0/08/09"
  - "/frameworks/cloudaware/resource-security/data-encryption"
similarPolicies:
  cloudConformity:
    - url: https://www.trendmicro.com/cloudoneconformity/knowledge-base/azure/VirtualMachines/virtual-hard-disk-cmk-encryption.html
      name: Use Customer Managed Keys for Virtual Hard Disk Encryption
