From c358fc7173690cc4846ee9850ab2ba9092ae473a Mon Sep 17 00:00:00 2001
From: SeSeicht <Sebastian.Seichter@microsoft.com>
Date: Thu, 19 May 2022 15:26:29 +0200
Subject: [PATCH] add Condition to EncryptionAtHost

---
 arm/Microsoft.Compute/virtualMachineScaleSets/deploy.bicep | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/arm/Microsoft.Compute/virtualMachineScaleSets/deploy.bicep b/arm/Microsoft.Compute/virtualMachineScaleSets/deploy.bicep
index 849a15c0ee..a049aeabc1 100644
--- a/arm/Microsoft.Compute/virtualMachineScaleSets/deploy.bicep
+++ b/arm/Microsoft.Compute/virtualMachineScaleSets/deploy.bicep
@@ -400,7 +400,7 @@ resource vmss 'Microsoft.Compute/virtualMachineScaleSets@2021-04-01' = {
         secrets: secrets
       }
       securityProfile: {
-        encryptionAtHost: encryptionAtHost
+        encryptionAtHost: encryptionAtHost ? encryptionAtHost : null
         securityType: securityType
         uefiSettings: securityType == 'TrustedLaunch' ? {
           secureBootEnabled: secureBootEnabled