1
00:00:01,040 --> 00:00:04,200
I'd mentioned in the previous lesson that the Recovery Services

2
00:00:04,200 --> 00:00:07,810
vault can work just fine with Azure VMs whose disks are

3
00:00:07,810 --> 00:00:10,860
encrypted with Azure Disk Encryption, or ADE.

4
00:00:10,860 --> 00:00:14,040
How do we restore those encrypted VMs?

5
00:00:14,040 --> 00:00:15,340
Well, step one, of course,

6
00:00:15,340 --> 00:00:18,190
you need to make sure to back up those encrypted Azure

7
00:00:18,190 --> 00:00:20,330
VMs to the Recovery Services vault.

8
00:00:20,330 --> 00:00:21,540
As a dependency,

9
00:00:21,540 --> 00:00:25,280
you also have to make sure that the key vault that contains

10
00:00:25,280 --> 00:00:29,340
those ADE keys is available and accessible.

11
00:00:29,340 --> 00:00:31,200
You'll do a disk restore,

12
00:00:31,200 --> 00:00:35,360
and then using the ARM template that I told you about a couple minutes ago,

13
00:00:35,360 --> 00:00:37,770
you can build up the VM again,

14
00:00:37,770 --> 00:00:43,400
but making sure to restore the key to Key Vault using JSON and Azure PowerShell.

15
00:00:43,400 --> 00:00:48,860
Check the exercise files for some guidance in Microsoft Docs on that as well.

16
00:00:48,860 --> 00:00:56,000
Now let's turn our theoretical understanding into practical action by undertaking our first demo.