The backup data for these VMs stored in the vault will be encrypted with the same methods as the encryption used on the vault.įor more information about encryption of managed disks with customer-managed keys, see this article. You don't need to perform any explicit actions for backup or restore of VMs that use customer-managed keys for encrypting their disks. SSE encrypts data in the storage service, enabling you to use any OS or images for your VMs. ADE uses the encryption tools of the operating system. Storage Service Encryption (SSE) using CMK differs from Azure Disk Encryption (ADE) encryption.
When you encrypt disks with customer-managed keys (CMK), the key used for encrypting the disks is stored in the Azure Key Vault and is managed by you. For more information about encryption with platform-managed keys, see this article. You can back up these VMs using Azure Backup without any specific actions required to support encryption on your end.
Encryption using platform-managed keysīy default, all the disks in your VMs are automatically encrypted-at-rest using platform-managed keys (PMK) that use storage service encryption. For more information, see Encryption of Azure VM backups. This article describes how to back up and restore Windows or Linux Azure virtual machines (VMs) with encrypted disks using the Azure Backup service.
0 kommentar(er)
