Skip to content

Commit 66e5cb5

Browse files
Clarify RSA key supportability
Removed reference to specific key (RSA 2048) and added reference to supported RSA keys. Feedback is based on customer confusion with key supportability. Also discussed with PG / Utsav Raghuvanshi.
1 parent 4520af5 commit 66e5cb5

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/backup/encryption-at-rest-with-cmk.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ This article discusses about how to:
3232

3333
- This feature isn't related to [Azure Disk Encryption](../virtual-machines/disk-encryption-overview.md), which uses guest-based encryption of a VM's disk using BitLocker (for Windows) and DM-Crypt (for Linux).
3434

35-
- The Recovery Services vault can be encrypted only with keys stored in Azure Key Vault, located in the **same region**. Also, keys must be **RSA keys** only and should be in **enabled** state.
35+
- The Recovery Services vault can be encrypted only with keys stored in Azure Key Vault, located in the **same region**. Also, keys must be [supported](../key-vault/keys/about-keys.md#key-types-and-protection-methods) **RSA keys** only and should be in **enabled** state.
3636

3737
- Moving CMK encrypted Recovery Services vault across Resource Groups and Subscriptions isn't currently supported.
3838
- Recovery Services vaults encrypted with customer-managed keys currently don't support cross-region restore of backed-up instances.
@@ -351,7 +351,7 @@ To assign the key and follow the steps, choose a client:
351351
352352
2. Select **Update** under **Encryption Settings**.
353353
354-
3. In the Encryption Settings pane, select **Use your own key** and continue to specify the key using one of the following ways. **Ensure that the key you want to use is an RSA 2048 key, which is in an enabled state.**
354+
3. In the Encryption Settings pane, select **Use your own key** and continue to specify the key using one of the following ways. **Ensure that the key you want to use is an RSA key, which is in an enabled state.**
355355
356356
1. Enter the **Key URI** with which you want to encrypt the data in this Recovery Services vault. You also need to specify the subscription in which the Azure Key Vault (that contains this key) is present. This key URI can be obtained from the corresponding key in your Azure Key Vault. Ensure the key URI is copied correctly. It's recommended that you use the **Copy to clipboard** button provided with the key identifier.
357357

0 commit comments

Comments
 (0)