Azure (22)

Enable BitLocker Encryption Key (BEK)

There’s two ways to enable BitLocker Encryption, either via PowerShell or through the Azure Portal. In this post, we will focus on using PowerShell. Note: For Server Core, you will need the additional files that the Azure Disk Encryption extension requires to enable BitLocker. These files relate to the BitLocker…

Enable Soft-Deletion/Purge on a Key vault

To enable via Azure CLI: Via Azure Portal: Removing a Key vault via PowerShell: Restoring a deleted Key vault via PowerShell: Note: When deleted the Key vault has been restored, all secrets/keys upon deletion will also be restored, including access policies. Deleteing a Key Vault (with purge…

Migrate a VM with Azure Site Recovery

In the post I will guide you on how to migrate an on premise VM into Azure using Azure Site Recovery service (ASR). These days, Microsoft recommends that you use Azure Migrate: Server Migration instead; the latter supports both physical and virtual machines, but also a raft…

Moving a VM to another Resource Group

Generally we can envisage particular naming conventions for Resource Groups (RG) that will stand the test of time. In Azure, once you create a Resource Group, you cannot rename it, period. There could be a reason to create a new RG and move a VM…

Private Endpoints for Azure Storage

Azure Private Endpoints, also broadly known as Private links for Azure resources, provides a way to directly connect to resources within your tenancy without traversing over the internet, improving throughput and latency. A great use for Private Endpoints is with Storage accounts, which connects them to a Virtual…