Azure Storage Service Encryption (SSE) is now supported for Azure Managed Disks. SSE provides encryption at rest and helps safeguard your data to meet your organizational security and compliance commitments.
SSE is enabled by default for all managed disks, snapshots, and images in all the public and Germany regions. Starting June 10, 2017, all new managed disks, snapshots, and images—and new data written to existing managed disks—are automatically encrypted at rest with keys managed by Microsoft.
For more details, see: