{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/", "slug": "dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment", "url": "https://update.dsesecurity.com/updates/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/" }, "title": "Verify the image's NVMe capability before accepting a new VM deployment", "summary": "Is an NVMe-capable VM size enough to ensure the new VM uses an NVMe controller?", "format": { "slug": "checklist", "name": "Checklist" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "network-infrastructure", "label": "Networks & infrastructure", "alt": "Resilient network core with engineered blue and gold data paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:30:40+00:00", "modified_at": "2026-09-10T00:35:08+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 243, "potentially_affected": "Image and deployment owners creating Azure VMs intended to use the NVMe storage interface.", "dse_recommendation": "Validate the image's generation and NVMe marking together with the target size and requested controller.", "primary_source": { "name": "NVMe Overview - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/nvme-overview", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft does not support NVMe disks on Generation 1 VMs. New NVMe deployments require a supported OS image marked for NVMe, from Marketplace or an organizational Azure Compute Gallery. The source warns that an unmarked image creates a SCSI-based VM. It also notes that some sizes support both interfaces while newer generations can be NVMe-only, making image and size compatibility a joint choice. Microsoft Learn.

\n

Applicability

\n

Review the exact image version and VM size selected by the deployment process. Include custom gallery images, not only marketplace defaults. Distinguish eligibility to create a VM from evidence that its resulting controller is the interface required by the workload.

\n

DSE recommendation

\n

Validate the image’s generation and NVMe marking together with the target size and requested controller. Make those properties part of image promotion and deployment review. Have the image owner resolve an unsupported OS or missing capability before changing production sizing. Avoid treating a deployment that silently uses another controller as an equivalent result merely because the VM starts.

\n

Verification

\n

Create a representative test VM through the intended deployment path and inspect its resulting controller type. Compare the image version, size, and controller with the approved combination. Run the workload’s storage checks without promising a performance gain from the interface name alone. Repeat this acceptance when replacing the gallery image or moving to a size with different controller support, and retain mismatches as failed deployment requirements.

\n

Official references

\n

Microsoft Learn: NVMe overview. Source reviewed September 9, 2026.

", "content_text": "Source facts\nMicrosoft does not support NVMe disks on Generation 1 VMs. New NVMe deployments require a supported OS image marked for NVMe, from Marketplace or an organizational Azure Compute Gallery. The source warns that an unmarked image creates a SCSI-based VM. It also notes that some sizes support both interfaces while newer generations can be NVMe-only, making image and size compatibility a joint choice. Microsoft Learn.\nApplicability\nReview the exact image version and VM size selected by the deployment process. Include custom gallery images, not only marketplace defaults. Distinguish eligibility to create a VM from evidence that its resulting controller is the interface required by the workload.\nDSE recommendation\nValidate the image’s generation and NVMe marking together with the target size and requested controller. Make those properties part of image promotion and deployment review. Have the image owner resolve an unsupported OS or missing capability before changing production sizing. Avoid treating a deployment that silently uses another controller as an equivalent result merely because the VM starts.\nVerification\nCreate a representative test VM through the intended deployment path and inspect its resulting controller type. Compare the image version, size, and controller with the approved combination. Run the workload’s storage checks without promising a performance gain from the interface name alone. Repeat this acceptance when replacing the gallery image or moving to a size with different controller support, and retain mismatches as failed deployment requirements.\nOfficial references\nMicrosoft Learn: NVMe overview. Source reviewed September 9, 2026.", "content_markdown": "## Source facts\n\nMicrosoft does not support NVMe disks on Generation 1 VMs. New NVMe deployments require a supported OS image marked for NVMe, from Marketplace or an organizational Azure Compute Gallery. The source warns that an unmarked image creates a SCSI-based VM. It also notes that some sizes support both interfaces while newer generations can be NVMe-only, making image and size compatibility a joint choice. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/nvme-overview).\n\n## Applicability\n\nReview the exact image version and VM size selected by the deployment process. Include custom gallery images, not only marketplace defaults. Distinguish eligibility to create a VM from evidence that its resulting controller is the interface required by the workload.\n\n## DSE recommendation\n\nValidate the image’s generation and NVMe marking together with the target size and requested controller. Make those properties part of image promotion and deployment review. Have the image owner resolve an unsupported OS or missing capability before changing production sizing. Avoid treating a deployment that silently uses another controller as an equivalent result merely because the VM starts.\n\n## Verification\n\nCreate a representative test VM through the intended deployment path and inspect its resulting controller type. Compare the image version, size, and controller with the approved combination. Run the workload’s storage checks without promising a performance gain from the interface name alone. Repeat this acceptance when replacing the gallery image or moving to a size with different controller support, and retain mismatches as failed deployment requirements.\n\n## Official references\n\n[Microsoft Learn: NVMe overview](https://learn.microsoft.com/en-us/azure/virtual-machines/nvme-overview). Source reviewed September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/", "url": "https://update.dsesecurity.com/updates/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Verify the image's NVMe capability before accepting a new VM deployment", "item": "https://update.dsesecurity.com/updates/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/", "url": "https://update.dsesecurity.com/updates/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/", "headline": "Verify the image's NVMe capability before accepting a new VM deployment", "description": "Is an NVMe-capable VM size enough to ensure the new VM uses an NVMe controller?", "abstract": "Is an NVMe-capable VM size enough to ensure the new VM uses an NVMe controller?", "articleBody": "Source facts\nMicrosoft does not support NVMe disks on Generation 1 VMs. New NVMe deployments require a supported OS image marked for NVMe, from Marketplace or an organizational Azure Compute Gallery. The source warns that an unmarked image creates a SCSI-based VM. It also notes that some sizes support both interfaces while newer generations can be NVMe-only, making image and size compatibility a joint choice. Microsoft Learn.\nApplicability\nReview the exact image version and VM size selected by the deployment process. Include custom gallery images, not only marketplace defaults. Distinguish eligibility to create a VM from evidence that its resulting controller is the interface required by the workload.\nDSE recommendation\nValidate the image’s generation and NVMe marking together with the target size and requested controller. Make those properties part of image promotion and deployment review. Have the image owner resolve an unsupported OS or missing capability before changing production sizing. Avoid treating a deployment that silently uses another controller as an equivalent result merely because the VM starts.\nVerification\nCreate a representative test VM through the intended deployment path and inspect its resulting controller type. Compare the image version, size, and controller with the approved combination. Run the workload’s storage checks without promising a performance gain from the interface name alone. Repeat this acceptance when replacing the gallery image or moving to a size with different controller support, and retain mismatches as failed deployment requirements.\nOfficial references\nMicrosoft Learn: NVMe overview. Source reviewed September 9, 2026.", "datePublished": "2026-09-10T00:30:40+00:00", "dateModified": "2026-09-10T00:35:08+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-076-verify-the-image-s-nvme-capability-before-accepting-a-new-vm-deployment/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Verify the image's NVMe capability before accepting a new VM deployment" }, "articleSection": [ "IT", "Networks & Infrastructure" ], "keywords": [ "IT", "Networks & Infrastructure", "Checklist", "Information priority" ], "genre": "Checklist", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 243, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "NVMe Overview - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/nvme-overview" } } ] } }