Skip to content

Commit 54c6965

Browse files
authored
Fixes MicrosoftDocs/azure-docs#44211
1 parent 9516aa1 commit 54c6965

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/sql-database/transparent-data-encryption-byok-azure-sql.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ ms.topic: conceptual
1010
author: jaszymas
1111
ms.author: jaszymas
1212
ms.reviewer: vanto
13-
ms.date: 02/12/2020
13+
ms.date: 03/18/2020
1414
ms.custom: azure-synapse
1515
---
1616
# Azure SQL Transparent Data Encryption with customer-managed key
@@ -94,7 +94,7 @@ Auditors can use Azure Monitor to review key vault AuditEvent logs, if logging i
9494

9595
- Enable auditing and reporting on all encryption keys: Key vault provides logs that are easy to inject into other security information and event management tools. Operations Management Suite [Log Analytics](https://docs.microsoft.com/azure/log-analytics/log-analytics-azure-key-vault) is one example of a service that is already integrated.
9696

97-
- Link each server with two key vaults that reside in different regions and hold the same key material, to ensure high availability of encrypted databases. Mark only the key from the key vault in the same region as a TDE protector. System will use
97+
- Link each server with two key vaults that reside in different regions and hold the same key material, to ensure high availability of encrypted databases. Mark only the key from the key vault in the same region as a TDE protector. System will automatically switch to the key vault in the remote region if there is an outage affecting the key vault in the same region.
9898

9999
### Recommendations when configuring TDE protector
100100
- Keep a copy of the TDE protector on a secure place or escrow it to the escrow service.

0 commit comments

Comments
 (0)