Enable CMEK for a Citrix Provisioning catalog created by MCS on Azure

In Azure environments, you can now enable customer-managed encryption-keys (CMEK) for a Citrix Provisioning catalog created by MCS. CMEK lets you manage encryption at a managed disk level and protect data on the machines in the catalog. A Disk Encryption Set (DES) represents a customer-managed key.

You can change the DES if the master image does not have DES, however, only the new VMs will have the new DES.