Announcing public preview for key security enhancement in Azure: Trusted Launch as default (TLaD) for new deployments of Gen2 Virtual Machines
(VMs), Virtual Machine Scale Sets (Scale set) and Azure Compute Gallery (ACG)
resources. This will help enhance the foundational security of new Azure Gen2 VMs & Scale set deployments
without any change to existing deployment scripts (like SDK, Bicep, ARM
templates, Terraform).
Trusted Launch VMs provide foundational compute security to Azure
Generation 2 VMs by enabling Secure Boot and vTPM capabilities. Trusted Launch
capabilities protect OS against rootkits, boot kits and enables attestation by
measuring the boot chain of VM.
Learn more.