How To Use Customer Managed Keys with Azure SQL Managed Instance

This video will describe the process and benefits of using Customer Managed Keys for Azure SQL Managed Instance. Service Managed Keys are the default for TDE (Transparent Data Encryption), but regulatory guidelines or other compliance mandates may require the use of a customer managed key. Learn how this process can be easily set up.

[@rvtraveltexas5575]

Great information! you are the best!

[@DataBar]

Glad you think so!

[@apramit1]

Is the CMK works on auto failover group? if yes, then how key volt will be accessible by secondary database? Please help me to understand. Any documentation will be much appreciated

[@DataBar]

Just like we provided the primary instance with access to the key vault, we need to provide any secondary instances with that same access to the key vault.

[@GavinLi-er9eu]

When I switch to the new TDE key, the existing database encryption_scan_state_desc is still in PROTECTION_CHANGE_IN_PROGRESS. How long does this state have to wait?

[@DataBar]

We’re you able to resolve this issue?