Skip to content

Commit 51df1bd

Browse files
Update migrate-to-trusted-launch-virtual-machines-with-azure-migrate.md
1 parent 846803f commit 51df1bd

1 file changed

Lines changed: 9 additions & 3 deletions

File tree

articles/migrate/migrate-to-trusted-launch-virtual-machines-with-azure-migrate.md

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -21,14 +21,20 @@ Trusted Launch is the default security type for supported Generation 2 Virtual
2121
Azure Migrate supports all Operating systems that are supported for Trusted Launch in Azure. For more information, See [Azure supported OS list and Virtual Machine sizes](/azure/virtual-machines/trusted-launch#operating-systems-supported).
2222

2323
>[!Note]
24-
>Trusted Launch is a security feature for Generation 2 Virtual Machines. Generation 1 Virtual Machines use BIOS and MBR, and they do not support Secure Boot or vTPM by design. As a result, Generation 1 Virtual Machines cannot use Trusted Launch and Azure migrate does not support migrating Gen 1 Virtual Machines to Trusted Launch virtual Machines
24+
>Trusted Launch is a security feature for Generation 2 Virtual Machines. Generation 1 Virtual Machines use BIOS and MBR, and they do not support Secure Boot or vTPM by design. As a result, Generation 1 Virtual Machines cannot use Trusted Launch and Azure migrate does not support migrating Gen 1 Virtual Machines to Trusted Launch virtual Machines.
2525
2626
## Secure boot
2727
At the root of Trusted Launch is Secure Boot. Secure Boot is implemented in platform firmware and protects virtual machines from malware such as bootkits and rootkits. Secure Boot ensures that only signed operating systems and drivers can start. It establishes a trusted boot chain for the virtual machine. When Secure Boot is enabled, all operating system boot components—including the boot loader, kernel, and kernel drivers—must be signed by trusted publishers. Both Windows and supported Linux distributions support Secure Boot. If Secure Boot can't verify a trusted signature, the virtual machine fails to boot.
2828

2929
>[!Note]
3030
>Secure Boot is configured as part of the Trusted Launch settings on the target Virtual Machine and isn’t inherited from the source Virtual Machine. Even if Secure Boot was enabled on the source Virtual Machine, it isn’t automatically enabled on the migrated Trusted Launch Virtual Machine. You must explicitly enable Secure Boot in the Trusted Launch configuration during migration.
3131
32-
## How to migrate to trusted launch virtual machines using Azure Migrate
33-
This guide explains how to migrate your workloads to Trusted Launch Virtual Machines using Azure Migrate. For more information, See [How to migrate to trusted launch virtual machines using Azure Migrate](tutorial-migrate-vmware.md).
32+
## Related Links
33+
- [Assess VM for Trusted Launch Virtual Machines](target-right-sizing.md).
34+
- [Migrate VMWare VMs to Trusted Launch VMs](tutorial-migrate-vmware.md).
35+
- [Migrate Hyper V VM to Trusted Launch VM](tutorial-migrate-hyper-v.md).
36+
- [Migrate Physical or other cloud servers to Trusted Launch VM](tutorial-migrate-physical-virtual-machines.md).
37+
38+
39+
3440

0 commit comments

Comments
 (0)