Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CLI Support for enabling double encryption for Managed Disks #14107

Closed
ramankumarlive opened this issue Jun 25, 2020 · 5 comments · Fixed by #14212
Closed

CLI Support for enabling double encryption for Managed Disks #14107

ramankumarlive opened this issue Jun 25, 2020 · 5 comments · Fixed by #14212
Assignees
@qwordy
Labels
Compute az vm/vmss/image/disk/snapshot Service Team Support Request
Milestone
S174

Comments

@ramankumarlive
Copy link

Resource Provider
Microsoft.Compute

Description of Feature or Work Requested

Double encryption at rest is the continuation of server-side encryption (SSE) at rest with customer managed keys (CMK) that we recently announced in GA for managed disks. SSE with CMK allows customers to encrypt the data stored on managed disks at rest with AES 256 encryption. High security sensitive customers who are concerned of the risk associated with any particular encryption algorithm, implementation , or key being compromised can now opt for additional layer of encryption using a different encryption algorithm/mode using platform managed encryption keys.

To enable two layers of encryption at rest for Managed Disks attached to VMs/VMSS, you must must create a DiskEncryptionSet with encryptionType set as EncryptionAtRestWithPlatformAndCustomerKeys and then associate the DiskEncryptionSet to managed disks.

You can find more details and sample ARM templates here: https://github.com/ramankumarlive/manageddisksdoubleencryptionpreview

Minimum API Version Required
2020-05-01

Swagger Link
Azure/azure-rest-api-specs#9552

Target Date
7/10 for "Enterprise" M4 milestone
@ghost ghost added needs-triage This is a new issue that needs to be triaged to the appropriate team. question The issue doesn't require a change to the product in order to be resolved. Most issues start as that labels Jun 25, 2020
@ghost ghost removed the needs-triage This is a new issue that needs to be triaged to the appropriate team. label Jun 25, 2020
@yungezz yungezz added this to the S172 milestone Jun 28, 2020
@yungezz yungezz removed the question The issue doesn't require a change to the product in order to be resolved. Most issues start as that label Jun 28, 2020
@yungezz
Copy link
Member

yungezz commented Jun 28, 2020

JEDI feature request. hi @ramankumarlive next Azure CLI official release date will be July 14th. Let's discuss the timeline offline in email.

@ramankumarlive
Copy link
Author

@yungezz Please use this swagger link: Azure/azure-rest-api-specs#9937

@yungezz
Copy link
Member

yungezz commented Jul 1, 2020

need bump version

@qwordy qwordy mentioned this issue Jul 7, 2020
Merged
2 tasks
@qwordy qwordy reopened this Jul 9, 2020
@yungezz
Copy link
Member

yungezz commented Aug 3, 2020

hi @qwordy why the issue is re-opened?

@yungezz yungezz modified the milestones: S172, S174 Aug 3, 2020
@qwordy
Copy link
Member

qwordy commented Aug 5, 2020

hi @qwordy why the issue is re-opened?

Bug of Github

@qwordy qwordy closed this as completed Aug 5, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@qwordy qwordy

Labels
Compute az vm/vmss/image/disk/snapshot Service Team Support Request
Projects
None yet
Milestone
S174
3 participants
@qwordy @ramankumarlive @yungezz