Ask HN: Security advisory Azure trusted launch VMs

2 points by klaas- 13 days ago · 3 comments · 2 min read

Hi, it seems azure has announced that all VMs world wide that run trusted launch need to be rebooted because of an unnamed security fix.

Does anyone have details on how bad the problem actually is?

Text of the security advisory:

You’re receiving this notification because you’re associated with one or more Azure subscriptions that currently use affected Azure virtual machines with Trusted Launch enabled.

Microsoft has deployed a security update to Azure infrastructure. A restart is required for the updated protection to take effect on affected running virtual machines. Action required To activate the updated protection:

    Review the affected virtual machines listed in the Account information section.
    Schedule a maintenance window based on your operational requirements.
    Restart each affected virtual machine.
    After the restart, verify that your applications and workloads are operating as expected.

During the restart, affected workloads will experience the interruption normally associated with a planned virtual machine restart.

What happens if you don’t take action Until an affected virtual machine is restarted, the updated protection won’t be active for that virtual machine. Microsoft won’t automatically restart your virtual machines. You must schedule and complete the restart based on your operational and business-continuity requirements.

Restart your virtual machines You can restart affected virtual machines by using the Azure portal, Azure CLI, Azure PowerShell, or the Azure REST API.