Added SecurityProfile to support Host Encryption for VM and Scaleset resources - Changes reviewed in PR: 9366

specification/compute/resource-manager/Microsoft.Compute/stable/2020-06-01/compute.json

@@ -2686,6 +2686,9 @@
           "Create a vm with ephemeral os disk provisioning in Cache disk using placement property.": {
             "$ref": "./examples/CreateAVmWithADiffOsDiskUsingDiffDiskPlacementAsCacheDisk.json"
           },
+          "Create a vm with Host Encryption using encryptionAtHost property.": {
+            "$ref": "./examples/CreateAVmWithEncryptionAtHost.json"
+          },
           "Create a vm with a patch setting patchMode of AutomaticByOS.": {
             "$ref": "./examples/CreateAVmWithPatchSettingModeOfAutomaticByOS.json"
           },
@@ -3594,6 +3597,9 @@
           },
           "Create a scale set with ephemeral os disks using placement property.": {
             "$ref": "./examples/CreateAScaleSetWithDiffOsDiskUsingDiffDiskPlacement.json"
+          },
+          "Create a scale set with Host Encryption using encryptionAtHost property.": {
+            "$ref": "./examples/CreateAScaleSetWithEncryptionAtHost.json"
           }
         }
       },
@@ -7855,6 +7861,15 @@
       },
       "description": "Specifies the storage settings for the virtual machine disks."
     },
+    "SecurityProfile": {
+      "properties": {
+        "encryptionAtHost": {
+          "type": "boolean",
+          "description": "This property can be used by user in the request to enable or disable the Host Encryption for the virtual machine or virtual machine scale set. This will enable the encryption for all the disks including Resource/Temp disk at host itself. <br><br> Default: The Encryption at host will be disabled unless this property is set to true for the resource."
+        }
+      },
+      "description": "Specifies the Security profile settings for the virtual machine or virtual machine scale set."
+    },
     "AdditionalCapabilities": {
       "properties": {
         "ultraSSDEnabled": {
@@ -8468,6 +8483,10 @@
           "$ref": "#/definitions/NetworkProfile",
           "description": "Specifies the network interfaces of the virtual machine."
         },
+        "securityProfile": {
+          "$ref": "#/definitions/SecurityProfile",
+          "description": "Specifies the Security related profile settings for the virtual machine."
+        },
         "diagnosticsProfile": {
           "$ref": "#/definitions/DiagnosticsProfile",
           "description": "Specifies the boot diagnostic settings state. <br><br>Minimum api-version: 2015-06-15."
@@ -9770,6 +9789,10 @@
           "$ref": "#/definitions/VirtualMachineScaleSetNetworkProfile",
           "description": "Specifies properties of the network interfaces of the virtual machines in the scale set."
         },
+        "securityProfile": {
+          "$ref": "#/definitions/SecurityProfile",
+          "description": "Specifies the Security related profile settings for the virtual machines in the scale set."
+        },
         "diagnosticsProfile": {
           "$ref": "#/definitions/DiagnosticsProfile",
           "description": "Specifies the boot diagnostic settings state. <br><br>Minimum api-version: 2015-06-15."
@@ -9815,6 +9838,10 @@
           "$ref": "#/definitions/VirtualMachineScaleSetUpdateNetworkProfile",
           "description": "The virtual machine scale set network profile."
         },
+        "securityProfile": {
+          "$ref": "#/definitions/SecurityProfile",
+          "description": "The virtual machine scale set Security profile"
+        },
         "diagnosticsProfile": {
           "$ref": "#/definitions/DiagnosticsProfile",
           "description": "The virtual machine scale set diagnostics profile."
@@ -10444,6 +10471,10 @@
           "$ref": "#/definitions/OSProfile",
           "description": "Specifies the operating system settings for the virtual machine."
         },
+        "securityProfile": {
+          "$ref": "#/definitions/SecurityProfile",
+          "description": "Specifies the Security related profile settings for the virtual machine."
+        },
         "networkProfile": {
           "$ref": "#/definitions/NetworkProfile",
           "description": "Specifies the network interfaces of the virtual machine."

specification/compute/resource-manager/Microsoft.Compute/stable/2020-06-01/examples/CreateAScaleSetWithEncryptionAtHost.json

@@ -0,0 +1,239 @@
+{
+  "parameters": {
+    "subscriptionId": "{subscription-id}",
+    "resourceGroupName": "myResourceGroup",
+    "vmScaleSetName": "{vmss-name}",
+    "api-version": "2020-06-01",
+    "parameters": {
+      "sku": {
+        "tier": "Standard",
+        "capacity": 3,
+        "name": "Standard_DS1_v2"
+      },
+      "properties": {
+        "overprovision": true,
+        "virtualMachineProfile": {
+          "storageProfile": {
+            "imageReference": {
+              "sku": "windows2016",
+              "publisher": "microsoft-ads",
+              "version": "latest",
+              "offer": "windows-data-science-vm"
+            },
+            "osDisk": {
+              "caching": "ReadOnly",
+              "managedDisk": {
+                "storageAccountType": "Standard_LRS"
+              },
+              "createOption": "FromImage"
+            }
+          },
+          "securityProfile": {
+            "encryptionAtHost": true
+          },
+          "osProfile": {
+            "computerNamePrefix": "{vmss-name}",
+            "adminUsername": "{your-username}",
+            "adminPassword": "{your-password}"
+          },
+          "networkProfile": {
+            "networkInterfaceConfigurations": [
+              {
+                "name": "{vmss-name}",
+                "properties": {
+                  "primary": true,
+                  "enableIPForwarding": true,
+                  "ipConfigurations": [
+                    {
+                      "name": "{vmss-name}",
+                      "properties": {
+                        "subnet": {
+                          "id": "/subscriptions/{subscription-id}/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/{existing-virtual-network-name}/subnets/{existing-subnet-name}"
+                        }
+                      }
+                    }
+                  ]
+                }
+              }
+            ]
+          }
+        },
+        "upgradePolicy": {
+          "mode": "Manual"
+        }
+      },
+      "plan": {
+        "publisher": "microsoft-ads",
+        "product": "windows-data-science-vm",
+        "name": "windows2016"
+      },
+      "location": "westus"
+    }
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "sku": {
+          "tier": "Standard",
+          "capacity": 3,
+          "name": "Standard_DS1_v2"
+        },
+        "name": "{vmss-name}",
+        "id": "/subscriptions/{subscription-id}/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachineScaleSets/{vmss-name}",
+        "plan": {
+          "publisher": "microsoft-ads",
+          "product": "standard-data-science-vm",
+          "name": "standard-data-science-vm"
+        },
+        "type": "Microsoft.Compute/virtualMachineScaleSets",
+        "properties": {
+          "singlePlacementGroup": true,
+          "overprovision": true,
+          "uniqueId": "b9e23088-6ffc-46e0-9e02-b0a6eeef47db",
+          "virtualMachineProfile": {
+            "storageProfile": {
+              "imageReference": {
+                "sku": "standard-data-science-vm",
+                "publisher": "microsoft-ads",
+                "version": "latest",
+                "offer": "standard-data-science-vm"
+              },
+              "osDisk": {
+                "caching": "ReadOnly",
+                "managedDisk": {
+                  "storageAccountType": "Standard_LRS"
+                },
+                "createOption": "FromImage"
+              }
+            },
+            "securityProfile": {
+              "encryptionAtHost": true
+            },
+            "osProfile": {
+              "computerNamePrefix": "{vmss-name}",
+              "adminUsername": "{your-username}",
+              "secrets": [],
+              "windowsConfiguration": {
+                "provisionVMAgent": true,
+                "enableAutomaticUpdates": true
+              }
+            },
+            "networkProfile": {
+              "networkInterfaceConfigurations": [
+                {
+                  "name": "{vmss-name}",
+                  "properties": {
+                    "dnsSettings": {
+                      "dnsServers": []
+                    },
+                    "primary": true,
+                    "enableIPForwarding": true,
+                    "ipConfigurations": [
+                      {
+                        "name": "{vmss-name}",
+                        "properties": {
+                          "subnet": {
+                            "id": "/subscriptions/{subscription-id}/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/nsgExistingVnet/subnets/nsgExistingSubnet"
+                          },
+                          "privateIPAddressVersion": "IPv4"
+                        }
+                      }
+                    ],
+                    "enableAcceleratedNetworking": false
+                  }
+                }
+              ]
+            }
+          },
+          "upgradePolicy": {
+            "mode": "Manual"
+          },
+          "provisioningState": "Creating"
+        },
+        "location": "westus"
+      }
+    },
+    "201": {
+      "body": {
+        "sku": {
+          "tier": "Standard",
+          "capacity": 3,
+          "name": "Standard_DS1_v2"
+        },
+        "name": "{vmss-name}",
+        "id": "/subscriptions/{subscription-id}/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachineScaleSets/{vmss-name}",
+        "plan": {
+          "publisher": "microsoft-ads",
+          "product": "standard-data-science-vm",
+          "name": "standard-data-science-vm"
+        },
+        "type": "Microsoft.Compute/virtualMachineScaleSets",
+        "properties": {
+          "singlePlacementGroup": true,
+          "overprovision": true,
+          "uniqueId": "b9e23088-6ffc-46e0-9e02-b0a6eeef47db",
+          "virtualMachineProfile": {
+            "storageProfile": {
+              "imageReference": {
+                "sku": "standard-data-science-vm",
+                "publisher": "microsoft-ads",
+                "version": "latest",
+                "offer": "standard-data-science-vm"
+              },
+              "osDisk": {
+                "caching": "ReadOnly",
+                "managedDisk": {
+                  "storageAccountType": "Standard_LRS"
+                },
+                "createOption": "FromImage"
+              }
+            },
+            "securityProfile": {
+              "encryptionAtHost": true
+            },
+            "osProfile": {
+              "computerNamePrefix": "{vmss-name}",
+              "adminUsername": "{your-username}",
+              "secrets": [],
+              "windowsConfiguration": {
+                "provisionVMAgent": true,
+                "enableAutomaticUpdates": true
+              }
+            },
+            "networkProfile": {
+              "networkInterfaceConfigurations": [
+                {
+                  "name": "{vmss-name}",
+                  "properties": {
+                    "dnsSettings": {
+                      "dnsServers": []
+                    },
+                    "primary": true,
+                    "enableIPForwarding": true,
+                    "ipConfigurations": [
+                      {
+                        "name": "{vmss-name}",
+                        "properties": {
+                          "subnet": {
+                            "id": "/subscriptions/{subscription-id}/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/nsgExistingVnet/subnets/nsgExistingSubnet"
+                          },
+                          "privateIPAddressVersion": "IPv4"
+                        }
+                      }
+                    ],
+                    "enableAcceleratedNetworking": false
+                  }
+                }
+              ]
+            }
+          },
+          "upgradePolicy": {
+            "mode": "Manual"
+          },
+          "provisioningState": "Creating"
+        },
+        "location": "westus"
+      }
+    }
+  }
+}