Azure - Upgrade to Trusted Launch - cannot remote desktop to VM

Based on the symptoms:

• Security type option greyed out
• Black screen in Boot diagnostics
• RDP not accessible

The likely causes are:

1. VM is not yet fully transitioned to a supported Generation 2 state
   • Trusted Launch can only be enabled on Generation 2 VMs with compatible configuration [learn.microsoft.com]
   • Running MBR2GPT converts the disk layout, but does not complete the full Gen1 → Gen2 VM conversion at the Azure platform level
2. Boot failure after MBR2GPT conversion
   • A black screen in boot diagnostics usually indicates a boot configuration issue (e.g., BCD/bootloader mismatch) [learn.microsoft.com]
   • This can prevent the OS from loading; hence RDP is unavailable
3. Security type greyed out
   • This occurs when the VM does not meet prerequisites (image/size/backup policy, or conversion not completed) or when the platform cannot validate the OS as Trusted Launch capable

Do not proceed further on current VM (likely in broken boot state)

1. Recover the VM (priority)
   • Use VM repair workflow (attach OS disk to another VM and repair boot files)
   • Or restore from backup/snapshot if available
2. Correct approach for Trusted Launch conversion
   • Follow full process (not just MBR2GPT):
   • Convert disk
   • Re-create or migrate VM as Generation 2
   • Ensure prerequisites (supported OS, size, backup policy)
   • Then enable Trusted Launch