You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/ai-services/openai/concepts/use-your-data.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -264,7 +264,7 @@ You can connect to your [Elasticsearch vector database](https://www.elastic.co/g
264
264
265
265
### Request access
266
266
267
-
Using the Elasticsearch data source is a preview feature which is subject to the Limited Access Service terms in the [service-specific terms](https://www.microsoft.com/licensing/terms/productoffering/MicrosoftAzure/EAEAS) for Azure AI services. You must fill out and submit a [request form](https://aka.ms/aoaioydelasticsearchrequest) to request access to the Elasticsearch data source. The form requests information about your company and the scenario for which you plan to use the Elasticsearch data source. After you submit the form, the Azure AI services team will review it and email you with a decision within 10 business days.
267
+
Using the Elasticsearch data source is a preview feature which is subject to the Limited Access Service terms in the [service-specific terms](https://www.microsoft.com/licensing/terms/productoffering/MicrosoftAzure/EAEAS). You must fill out and submit a [request form](https://aka.ms/aoaioydelasticsearchrequest) to request access to the Elasticsearch data source. The form requests information about your company and the scenario for which you plan to use the Elasticsearch data source. After you submit the form, the Azure OpenAI team will review it and email you with a decision within 10 business days.
268
268
269
269
### Connect Elasticsearch to Azure OpenAI On Your Data
Copy file name to clipboardExpand all lines: articles/ai-services/openai/encrypt-data-at-rest.md
+16-17Lines changed: 16 additions & 17 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,6 @@
1
1
---
2
2
title: Azure OpenAI in Azure AI Foundry Models encryption of data at rest
3
3
description: Learn how Azure OpenAI encrypts your data when it's persisted to the cloud.
4
-
titleSuffix: Azure AI services
5
4
author: mrbullwinkle
6
5
manager: nitinme
7
6
ms.service: azure-ai-openai
@@ -14,9 +13,9 @@ ms.author: mbullwin
14
13
15
14
Azure OpenAI automatically encrypts your data when it's persisted to the cloud. The encryption protects your data and helps you meet your organizational security and compliance commitments. This article covers how Azure OpenAI handles encryption of data at rest, specifically training data and fine-tuned models. For information on how data provided by you to the service is processed, used, and stored, consult the [data, privacy, and security article](/legal/cognitive-services/openai/data-privacy?context=/azure/ai-services/openai/context/context).
16
15
17
-
## About Azure AI services encryption
16
+
## About Azure OpenAI encryption
18
17
19
-
Azure OpenAI is part of Azure AI services. Azure AI services data is encrypted and decrypted using [FIPS 140-2](https://en.wikipedia.org/wiki/FIPS_140-2) compliant [256-bit AES](https://en.wikipedia.org/wiki/Advanced_Encryption_Standard) encryption. Encryption and decryption are transparent, meaning encryption and access are managed for you. Your data is secure by default and you don't need to modify your code or applications to take advantage of encryption.
18
+
Azure OpenAI data is encrypted and decrypted using [FIPS 140-2](https://en.wikipedia.org/wiki/FIPS_140-2) compliant [256-bit AES](https://en.wikipedia.org/wiki/Advanced_Encryption_Standard) encryption. Encryption and decryption are transparent, meaning encryption and access are managed for you. Your data is secure by default and you don't need to modify your code or applications to take advantage of encryption.
20
19
21
20
## About encryption key management
22
21
@@ -26,7 +25,7 @@ By default, your subscription uses Microsoft-managed encryption keys. There's al
26
25
27
26
Customer-managed keys (CMK), also known as Bring your own key (BYOK), offer greater flexibility to create, rotate, disable, and revoke access controls. You can also audit the encryption keys used to protect your data.
28
27
29
-
You must use Azure Key Vault to store your customer-managed keys. You can either create your own keys and store them in a key vault, or you can use the Azure Key Vault APIs to generate keys. The Azure AI services resource and the key vault must be in the same region and in the same Microsoft Entra tenant, but they can be in different subscriptions. For more information about Azure Key Vault, see [What is Azure Key Vault?](/azure/key-vault/general/overview).
28
+
You must use Azure Key Vault to store your customer-managed keys. You can either create your own keys and store them in a key vault, or you can use the Azure Key Vault APIs to generate keys. The Azure OpenAI resource and the key vault must be in the same region and in the same Microsoft Entra tenant, but they can be in different subscriptions. For more information about Azure Key Vault, see [What is Azure Key Vault?](/azure/key-vault/general/overview).
30
29
31
30
To enable customer-managed keys, the key vault containing your keys must meet these requirements:
32
31
@@ -35,14 +34,14 @@ To enable customer-managed keys, the key vault containing your keys must meet th
35
34
- The key vault must use [legacy access policies](/azure/key-vault/general/assign-access-policy).
36
35
- You must grant the Azure OpenAI resource's system-assigned managed identity the following permissions on your key vault: *get key*, *wrap key*, *unwrap key*.
37
36
38
-
Only RSA and RSA-HSM keys of size 2048 are supported with Azure AI services encryption. For more information about keys, see **Key Vault keys** in [About Azure Key Vault keys, secrets and certificates](/azure/key-vault/general/about-keys-secrets-certificates).
37
+
Only RSA and RSA-HSM keys of size 2048 are supported with Azure OpenAI encryption. For more information about keys, see **Key Vault keys** in [About Azure Key Vault keys, secrets and certificates](/azure/key-vault/general/about-keys-secrets-certificates).
39
38
40
39
### Enable your Azure OpenAI resource's managed identity
41
40
42
41
> [!NOTE]
43
42
> Azure OpenAI only supports customer-managed keys (CMK) with system-assigned managed identities. User-assigned managed identities are not supported with Azure OpenAI and customer-managed keys (CMK).
44
43
45
-
1. Go to your Azure AI services resource.
44
+
1. Go to your Azure OpenAI resource.
46
45
1. On the left, under **Resource Management**, select **Identity**.
47
46
1. Switch the system-assigned managed identity status to **On**.
48
47
1. Save your changes, and confirm that you want to enable the system-assigned managed identity.
@@ -68,7 +67,7 @@ Only RSA and RSA-HSM keys of size 2048 are supported with Azure AI services encr
68
67
69
68
To enable customer-managed keys in the Azure portal, follow these steps:
70
69
71
-
1. Go to your Azure AI services resource.
70
+
1. Go to your Azure OpenAI resource.
72
71
1. On the left, under **Resource Management**, select **Encryption**.
73
72
1. Under **Encryption type**, select **Customer Managed Keys**, as shown in the following screenshot.
74
73
@@ -77,7 +76,7 @@ To enable customer-managed keys in the Azure portal, follow these steps:
77
76
78
77
### Specify a key
79
78
80
-
After you enable customer-managed keys, you can specify a key to associate with the Azure AI services resource.
79
+
After you enable customer-managed keys, you can specify a key to associate with the Azure OpenAI resource.
81
80
82
81
#### Specify a key as a URI
83
82
@@ -90,11 +89,11 @@ To specify a key as a URI, follow these steps:
90
89
91
90
:::image type="content" source="../media/cognitive-services-encryption/key-uri-portal.png" alt-text="Screenshot of the Azure portal page for a key version. The Key Identifier box contains a placeholder for a key URI.":::
92
91
93
-
1. Go back to your Azure AI services resource, and then select **Encryption**.
92
+
1. Go back to your Azure OpenAI resource, and then select **Encryption**.
94
93
1. Under **Encryption key**, select **Enter key URI**.
95
94
1. Paste the URI that you copied into the **Key URI** box.
96
95
97
-
:::image type="content" source="../media/cognitive-services-encryption/ssecmk2.png" alt-text="Screenshot of the Encryption page for an Azure AI services resource. The Enter key URI option is selected, and the Key URI box contains a value.":::
96
+
:::image type="content" source="../media/cognitive-services-encryption/ssecmk2.png" alt-text="Screenshot of the Encryption page for an Azure OpenAI resource. The Enter key URI option is selected, and the Key URI box contains a value.":::
98
97
99
98
1. Under **Subscription**, select the subscription that contains the key vault.
100
99
1. Save your changes.
@@ -103,7 +102,7 @@ To specify a key as a URI, follow these steps:
103
102
104
103
To select a key from a key vault, first make sure that you have a key vault that contains a key. Then follow these steps:
105
104
106
-
1. Go to your Azure AI services resource, and then select **Encryption**.
105
+
1. Go to your Azure OpenAI resource, and then select **Encryption**.
107
106
1. Under **Encryption key**, select **Select from Key Vault**.
108
107
1. Select the key vault that contains the key that you want to use.
109
108
1. Select the key that you want to use.
@@ -114,23 +113,23 @@ To select a key from a key vault, first make sure that you have a key vault that
114
113
115
114
## Update the key version
116
115
117
-
When you create a new version of a key, update the Azure AI services resource to use the new version. Follow these steps:
116
+
When you create a new version of a key, update the Azure OpenAI resource to use the new version. Follow these steps:
118
117
119
-
1. Go to your Azure AI services resource, and then select **Encryption**.
118
+
1. Go to your Azure OpenAI resource, and then select **Encryption**.
120
119
1. Enter the URI for the new key version. Alternately, you can select the key vault and then select the key again to update the version.
121
120
1. Save your changes.
122
121
123
122
## Use a different key
124
123
125
124
To change the key that you use for encryption, follow these steps:
126
125
127
-
1. Go to your Azure AI services resource, and then select **Encryption**.
126
+
1. Go to your Azure OpenAI resource, and then select **Encryption**.
128
127
1. Enter the URI for the new key. Alternately, you can select the key vault and then select a new key.
129
128
1. Save your changes.
130
129
131
130
## Rotate customer-managed keys
132
131
133
-
You can rotate a customer-managed key in Key Vault according to your compliance policies. When the key is rotated, you must update the Azure AI services resource to use the new key URI. To learn how to update the resource to use a new version of the key in the Azure portal, see [Update the key version](#update-the-key-version).
132
+
You can rotate a customer-managed key in Key Vault according to your compliance policies. When the key is rotated, you must update the Azure OpenAI resource to use the new key URI. To learn how to update the resource to use a new version of the key in the Azure portal, see [Update the key version](#update-the-key-version).
134
133
135
134
Rotating the key doesn't trigger re-encryption of data in the resource. No further action is required from the user.
136
135
@@ -168,9 +167,9 @@ The Fine-tunes API allows customers to create their own fine-tuned version of th
168
167
169
168
## Disable customer-managed keys
170
169
171
-
When you disable customer-managed keys, your Azure AI services resource is then encrypted with Microsoft-managed keys. To disable customer-managed keys, follow these steps:
170
+
When you disable customer-managed keys, your Azure OpenAI resource is then encrypted with Microsoft-managed keys. To disable customer-managed keys, follow these steps:
172
171
173
-
1. Go to your Azure AI services resource, and then select **Encryption**.
172
+
1. Go to your Azure OpenAI resource, and then select **Encryption**.
174
173
1. Select **Microsoft Managed Keys** > **Save**.
175
174
176
175
When you previously enabled customer managed keys this also enabled a system assigned managed identity, a feature of Microsoft Entra ID. Once the system assigned managed identity is enabled, this resource will be registered with Microsoft Entra ID. After being registered, the managed identity will be given access to the Key Vault selected during customer managed key setup. You can learn more about [Managed Identities](/azure/active-directory/managed-identities-azure-resources/overview).
Copy file name to clipboardExpand all lines: articles/ai-services/openai/faq.yml
+6-8Lines changed: 6 additions & 8 deletions
Original file line number
Diff line number
Diff line change
@@ -1,18 +1,16 @@
1
1
### YamlMime:FAQ
2
2
metadata:
3
-
title: Azure OpenAI Service frequently asked questions
4
-
titleSuffix: Azure AI services
5
-
description: Get answers to the most popular questions about Azure OpenAI Service
3
+
title: Azure OpenAI frequently asked questions
4
+
description: Get answers to the most popular questions about Azure OpenAI
6
5
#services: cognitive-services
7
6
manager: nitinme
8
7
ms.service: azure-ai-openai
9
8
ms.topic: faq
10
9
ms.date: 03/27/2025
11
10
ms.author: mbullwin
12
11
author: mrbullwinkle
13
-
title: Azure OpenAI Service frequently asked questions
12
+
title: Azure OpenAI frequently asked questions
14
13
summary: |
15
-
If you can't find answers to your questions in this document, and still need help check the [Azure AI services support options guide](../cognitive-services-support-options.md?context=/azure/ai-services/openai/context/context). Azure OpenAI is part of Azure AI services.
16
14
sections:
17
15
- name: Data and Privacy
18
16
questions:
@@ -47,15 +45,15 @@ sections:
47
45
- question: |
48
46
Does Azure OpenAI support VNETs and Private Endpoints?
49
47
answer: |
50
-
Yes, as part of Azure AI services, Azure OpenAI supports VNETs and Private Endpoints. To learn more, consult the [Azure AI services virtual networking guidance](../cognitive-services-virtual-networks.md?context=/azure/ai-services/openai/context/context).
48
+
Yes, Azure OpenAI supports VNETs and Private Endpoints. To learn more, consult the [virtual networking guidance](../cognitive-services-virtual-networks.md?context=/azure/ai-services/openai/context/context).
51
49
- question: |
52
50
Do the GPT-4 models currently support image input?
53
51
answer: |
54
52
No, GPT-4 is designed by OpenAI to be multimodal, but currently only text input and output are supported.
55
53
- question: |
56
54
How do I apply for new use cases?
57
55
answer: |
58
-
Previously, the process for adding new use cases required customers to reapply to the service. Now, we're releasing a new process that allows you to quickly add new use cases to your use of the service. This process follows the established Limited Access process within Azure AI services. [Existing customers can attest to any and all new use cases here](https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=v4j5cvGGr0GRqy180BHbR7en2Ais5pxKtso_Pz4b1_xUM003VEJPRjRSOTZBRVZBV1E5N1lWMk1XUyQlQCN0PWcu). Note that this is required anytime you would like to use the service for a new use case you didn't originally apply for.
56
+
Previously, the process for adding new use cases required customers to reapply to the service. Now, we're releasing a new process that allows you to quickly add new use cases to your use of the service. This process follows the established Limited Access process within Azure OpenAI. [Existing customers can attest to any and all new use cases here](https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=v4j5cvGGr0GRqy180BHbR7en2Ais5pxKtso_Pz4b1_xUM003VEJPRjRSOTZBRVZBV1E5N1lWMk1XUyQlQCN0PWcu). Note that this is required anytime you would like to use the service for a new use case you didn't originally apply for.
59
57
- question: |
60
58
I'm trying to use embeddings and received the error "InvalidRequestError: Too many inputs. The max number of inputs is 16." How do I fix this?
61
59
answer: |
@@ -161,7 +159,7 @@ sections:
161
159
- question: |
162
160
Where do I go for Azure OpenAI customer support?
163
161
answer: |
164
-
Azure OpenAI is part of Azure AI services. You can learn about all the support options for Azure AI services in the [support and help options guide](../cognitive-services-support-options.md?context=%2fazure%2fcognitive-services%2fopenai%2fcontext%2fcontext).
162
+
You can learn about all the support options for Azure OpenAI in the [support and help options guide](../cognitive-services-support-options.md?context=%2fazure%2fcognitive-services%2fopenai%2fcontext%2fcontext).
-d '{"messages":[{"role": "system", "content": "You are a helpful assistant."},{"role": "user", "content": "Does Azure OpenAI support customer managed keys?"},{"role": "assistant", "content": "Yes, customer managed keys are supported by Azure OpenAI."},{"role": "user", "content": "Do other Azure AI services support this too?"}]}'
344
+
-d '{"messages":[{"role": "system", "content": "You are a helpful assistant."},{"role": "user", "content": "Does Azure OpenAI support customer managed keys?"},{"role": "assistant", "content": "Yes, customer managed keys are supported by Azure OpenAI."},{"role": "user", "content": "Do other Azure services support this too?"}]}'
0 commit comments