Azure Compliance ControlsAzure Virtual Machines
Virtual machines should have Trusted Launch enabled
Azure VMs are evaluated for Trusted Launch with both Secure Boot and vTPM enabled. The check identifies VMs not set to TrustedLaunch or missing secureBootEnabled and vTpmEnabled together.
What this control checks
VMs must be set to TrustedLaunch with both Secure Boot and vTPM enabled.
Framework mappings
The clauses this control is mapped to in each framework.
RBI Cyber Security Framework for UCBs
- Annex I (1.1)
- 7.9 Ensure Trusted Launch is enabled on Virtual Machines
- 8.11 Ensure Trusted Launch is enabled on Virtual Machines
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_vm_trust_launch_enabled - Powerpipe Control:
azure_compliance.control.compute_vm_trust_launch_enabled - Prowler Check:
vm_trusted_launch_enabled
Last reviewed: 2026-10-11