[Doc]: Set-AzVMSecurityProfile cannot change the --SecurityType

[OrlandoAMunoz]

Description

Set-AzVMSecutiryProfile only works during the VM creation process.

Please include a warning on the following DOC stating Set-AzVMSecutiryProfile cannot change the --SecurityType from None to Trusted or from Trusted to None on existing VMs.
https://docs.microsoft.com/en-us/powershell/module/az.compute/set-azvmsecurityprofile?view=azps-7.5.0

Set-AzVMSecutiryProfile should also issue an error when applying a --SecurityType change on an existing VM.

Thank you for your feedback. This has been routed to the support team for assistance.

[dingmeng-xue]

Thanks for reporting. It needs further confirmation by service team.

[navba-MSFT]

@OrlandoAMunoz Apologies for the late reply. Thanks for reaching out to us and reporting this issue. We are looking into this issue and we will provide an update.

[navba-MSFT]

@OrlandoAMunoz Could you please test with the below command and check:

$VM = Get-AzVM -ResourceGroupName "ResourceGroup11" -VMName "ContosoVM07"
$vmSecurityProfile = Set-AzVmSecurityProfile -VM $VM -SecurityType "TrustedLaunch"
$vmSecurityProfile.SecurityProfile

The first command gets the virtual machine named ContosoVM07 by using Get-AzVm. The command stores it in the $VM variable. The second command sets the SecurityType enum to "TrustedLaunch"

Please test this and get back to us. If you face any issues while setting the SecurityType, please share the debug output here by running $DebugPreference="Continue" command first before running the above command.