You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| Microsoft managed keys (MMK) | In most cache sizes. Disk encryption isn't supported for Basic and Standard sizes C0 and C1. | Yes |
22
-
| Customer managed keys (CMK) | No | Yes |
19
+
-**Basic, Standard, Premium tiers:**
20
+
- Microsoft managed keys (MMK) are used for disk encryption in most cache sizes.
21
+
- Disk encryption isn't supported for Basic and Standard sizes C0 and C1.
22
+
- Customer managed keys (CMK) aren't supported.
23
+
24
+
-**Enterprise, Enterprise Flash tiers:**
25
+
- Microsoft managed keys (MMK) are supported.
26
+
- Customer managed keys (CMK) are supported.
23
27
24
28
> [!WARNING]
25
29
> By default, all Azure Cache for Redis tiers use Microsoft managed keys to encrypt disks mounted to cache instances. However, in the Basic and Standard tiers, the C0 and C1 SKUs don't support any disk encryption.
@@ -29,9 +33,7 @@ Azure Cache for Redis offers platform-managed keys (PMKs), also know as Microsof
29
33
> On the Premium tier, data persistence streams data directly to Azure Storage, so disk encryption is less important. Azure Storage offers a [variety of encryption methods](../storage/common/storage-service-encryption.md) to be used instead.
30
34
>
31
35
32
-
## Encryption coverage
33
-
34
-
### Enterprise tiers
36
+
## Enterprise tier encryption
35
37
36
38
In the **Enterprise** tier, disk encryption is used to encrypt the persistence disk, temporary files, and the OS disk:
37
39
@@ -49,7 +51,7 @@ In the **Enterprise Flash** tier, keys and values are also partially stored on-d
49
51
| RDB files waiting to be exported | OS disk and Persistence disk | MMK or CMK |
In the **Basic, Standard, and Premium** tiers, the OS disk is encrypted by default using MMK. There's no persistence disk mounted and Azure Storage is used instead. The C0 and C1 SKUs don't use disk encryption.
0 commit comments