In Azure, all virtual machine disks are encrypted at rest. This means that the VM disk files are on an encrypted physical disk in the Azure data centre. This won’t prevent a disk being downloaded as a VHD using Azure Storage Explorer however, as the disk will become unencrypted when downloaded. See https://docs.microsoft.com/en-us/azure/virtual-machines/disks-use-storage-explorer-managed-disks To add…