Azure Virtual Desktop Support for Trusted Launch Virtual Machines
We are excited to officially announce Azure Virtual Desktop support for Trusted Launch virtual machines! Deploying Trusted Launch virtual machines in your Azure Virtual Desktop environment allows you to improve the security posture of your virtual machines by protecting against advanced and persistent attack techniques. The key benefits are as follows:
- Protect against the installation of malware-based rootkits and boot kits with Secure Boot.
- Provide your VM with its own dedicated Trusted Platform Module instance with a vTPM.
- Protect Windows kernel-mode processes against injection and execution of malicious or unverified code with Hypervisor Code Integrity.
- Isolate and protect secrets so that only privileged system software can access them with Windows Defender Credential Guard.
- Ability to perform feature updates when using Windows 11 Enterprise or Windows 11 Enterprise multi-session.
There is now a Trusted launch virtual machines option under Security type when adding virtual machines in the host pool UI:
When the Trusted Launch virtual machines Security type is selected, you will also have the option to enable secure boot and vTPM:
To learn more about Trusted Launch virtual machines, please visit here.
Published on:
Learn moreRelated posts
Power Pages | Azure AD B2C | Confirm Email message on Profile
If you are unfamiliar with configuring Azure AD B2C as a Power Pages Identity Provider, refer to this post: Power Pages : Set up Azure AD B2C ...
Building a RAG-Based Smart Memory Application with Azure SQL Database
Project Mission The way people work and manage information is changing rapidly in our digital age. More and more people are struggling to keep...
Reducing PAT usage across Azure DevOps
In the new year, we’ll be making moves towards strengthening Microsoft and our customers’ security posture in regards to the usage and c...