From ffa45b51c3a6ea7497216d3120c76573054d45a9 Mon Sep 17 00:00:00 2001
From: SeSeicht <Sebastian.Seichter@microsoft.com>
Date: Mon, 11 Apr 2022 16:34:28 +0200
Subject: [PATCH] encryptionAtHost null if not true

---
 arm/Microsoft.Compute/virtualMachines/deploy.bicep | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/arm/Microsoft.Compute/virtualMachines/deploy.bicep b/arm/Microsoft.Compute/virtualMachines/deploy.bicep
index 1090e73c9a..113a190d8c 100644
--- a/arm/Microsoft.Compute/virtualMachines/deploy.bicep
+++ b/arm/Microsoft.Compute/virtualMachines/deploy.bicep
@@ -369,7 +369,7 @@ resource virtualMachine 'Microsoft.Compute/virtualMachines@2021-07-01' = {
       vmSize: vmSize
     }
     securityProfile: {
-      encryptionAtHost: encryptionAtHost
+      encryptionAtHost: encryptionAtHost ? encryptionAtHost : null
       securityType: securityType
       uefiSettings: securityType == 'TrustedLaunch' ? {
         secureBootEnabled: secureBootEnabled