Login-AzureRmAccount
#Select your subscription
Select-AzureRmSubscription –Subscriptionid ********-****-****-****-************
$rgName = 'RG';
$vmName = ‘Test-VM’;
#Paste the Application ID that was copied in the previous step
$aadClientID = '********-****-****-****-************';
$aadClientSecret = '3ZLm95424Eu0wDzPQakIQxbnRYG04J7UqeF+ctiPtHM=';
$KeyVaultName = 'Demo-KeyVault';
$keyEncryptionKeyName = 'Key-1';
$KeyVault = Get-AzureRmKeyVault -VaultName $KeyVaultName -ResourceGroupName $rgname;
$diskEncryptionKeyVaultUrl = $KeyVault.VaultUri;
$KeyVaultResourceId = $KeyVault.ResourceId;
$keyEncryptionKeyUrl = (Get-AzureKeyVaultKey -VaultName $KeyVaultName -Name $keyEncryptionKeyName).Key.kid;
Set-AzureRmVMDiskEncryptionExtension -ResourceGroupName $rgname -VMName $vmName -AadClientID $aadClientID -AadClientSecret $aadClientSecret -DiskEncryptionKeyVaultUrl $diskEncryptionKeyVaultUrl -DiskEncryptionKeyVaultId $KeyVaultResourceId -KeyEncryptionKeyUrl $keyEncryptionKeyUrl -KeyEncryptionKeyVaultId $KeyVaultResourceId -VolumeType All;