Disk Encryption Set is a new resource introduced in the Azure cloud platform for simplifying the critical management for managed disks. These managed disks are new and recommended disk storage offerings with Azure virtual machines for the persistent storage of data. When a disk encryption set is created, a system-assigned managed identity is created in Azure Active Directory (AD) and associated with the disk encryption set.
Read this blog, to learn how to create an Azure Disk encryption set to control the encryption keys and meet your security and compliance needs