Generally Available: Trusted launch as default for VMs deployed through the Azure portal
Share
Services
[Trusted launch](https://docs.microsoft.com/en-us/azure/virtual-machines/trusted-launch), hardens your Azure virtual machines with security features that allow administrators to deploy virtual machines with verified and signed bootloaders, OS kernels, and a boot policy. This is accomplished via trusted launch features: secure boot, vTPM, and boot integrity monitoring that protect against boot kits, rootkits, and kernel-level malware. With this announcement trusted launch is enabled by default.
* **Secure Boot** protects against the installation of malware-based rootkits and boot kits and only allows signed OSes and drivers to boot.
* **Virtual TPM (vTPM)** allows customers to protect keys, certificates, and secrets in the virtual machine.
* **Measured Boot** examines and verifies the authenticity of bootloader’s signature and performs integrity measurement of the entire boot chain.
* **Boot integrity monitoring** via [Microsoft Azure Attestation](https://docs.microsoft.com/en-us/azure/attestation/overview) and Azure Security Center generates integrity alerts, recommendations, and remediations if remote attestation fails.
As of this announcement, trusted launch is enabled by default for VMs when deployed through the Azure portal.
For more information, read the [blog post](https://techcommunity.microsoft.com/t5/azure-confidential-computing/announcing-trusted-launch-as-default-in-azure-portal/ba-p/3854872).
* Virtual Machines
* Features
* Security
* [ Virtual Machines](https://azure.microsoft.com/en-gb/products/virtual-machines/)
What else is happening at Microsoft Azure?
Read update
Services
Share
Read update
Services
Share
We’re retiring Azure Time Series Insights on 7 July 2024 – transition to Azure Data Explorer
May 31st, 2024
Services
Share