Azure Storage Service Encryption (SSE) support for Managed Disks
Date updated: 15 June 2017
Azure Storage Service Encryption (SSE) is now supported for Managed Disks. SSE provides encryption-at-rest and safeguards your data to meet your organisational security and compliance commitments.
SSE is enabled by default for all managed disks, snapshots and images in all the public and Germany regions. As of 10 June 2017, all new managed disks, snapshots, images and new data written to existing managed disks are automatically encrypted-at-rest with keys managed by Microsoft. Visit the Managed Disks FAQ page for more details.