Azure Storage Service Encryption (SSE) support for Managed Disks
Azure Storage Service Encryption (SSE) is now supported for Managed Disks. SSE provides encryption-at-rest and safeguards your data to meet your organizational security and compliance commitments.
SSE is enabled by default for all managed disks, snapshots, and images in all the public and Germany regions. Starting June 10th, 2017, all new managed disks, snapshots, Images and new data written to existing managed disks are automatically encrypted-at-rest with keys managed by Microsoft. Visit the Managed Disks FAQ page for more details.