Hello everyone,
Azure NetApp Files now supports transitioning from platform-managed keys (PMK) to customer-managed keys (CMK), giving organizations more control over their data encryption strategy. This update enhances security, compliance, and operational flexibility without requiring data migration.
Why This Matters
- Greater Security Control – Organizations can manage their own encryption keys, aligning with internal security policies and regulatory requirements.
- Seamless Transition – Existing volumes can be encrypted with customer-managed keys without moving data, minimizing disruptions.
- Improved Compliance – Enables enterprises to meet strict compliance mandates by fully managing encryption key lifecycles.
How to Enable This Feature
- Register for the Preview – Since this capability is in preview, it must be activated within your Azure subscription.
- Set Up Key Vault – Configure an Azure Key Vault, ensuring that soft delete and purge protection are enabled.
- Initiate the Transition – Through the Azure portal or API, switch encryption from platform-managed to customer-managed keys. Keep in mind that this process is one-way and cannot be reversed.
Considerations Before Transitioning
- Regional Support – Check whether this feature is available in the regions where you operate.
- Access Management – Ensure that Azure NetApp Files has proper permissions to use encryption keys from the configured Key Vault.
This update reinforces Azure’s commitment to giving customers full control over data security. If your organization needs advanced encryption management, now is a great time to explore this feature.
Stay ahead in securing your cloud environment! 🚀