title: How to tell if a disk attached to an Azure Virtual Machine is encrypted?
body: <p>I encrypted the disks of an Ubuntu 16.04 machine on Azure following <a href="https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-linux" rel="nofollow noreferrer">this instructions</a>. Apparently the process completed successfully, however when using the command:</p>
  
  <pre><code>az vm encryption show --resource-group "&lt;res-group&gt;" --name "&lt;vm-name&gt;"
  </code></pre>
  
  <p>I get some confusing results:</p>
  
  <pre><code>{
    "disks": [
      {
        "encryptionSettings": null,
        "name": "...",
        "statuses": [
          {
            "code": "EncryptionState/notEncrypted",
            "displayStatus": "Disk is not encrypted",
            ...
          }
        ]
      }
    ],
    "status": [
      {
        "code": "ProvisioningState/succeeded",
        "displayStatus": "Provisioning succeeded",
        "message": "Encryption succeeded for all volumes",
        ...
      }
    ],
    "substatus": [
      {
        "code": "ComponentStatus/Microsoft.Azure.Security.AzureDiskEncryptionForLinux/succeeded",
        "displayStatus": "Provisioning succeeded",
        "message": "{\"os\": \"Encrypted\", \"data\": \"NotMounted\"}",
        ....
      }
    ]
  }
  </code></pre>
  
  <p>As you can see I get the message <em>Encryption succeeded for all volumes</em> but at the same time <em>Disk is not encrypted</em>.</p>
  
  <p>How can I tell with 100% certainty if indeed my disk is encrypted?</p>