" Your key vault and VMs must be in the same subscription. Also, to ensure that encryption secrets don ' t cross regional boundaries, Azure Disk Encryption requires the Key Vault and the VMs to be co-located in the same region. " https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault