Skip to content

Commit a9cb6c0

Browse files
authored
Merge pull request #188643 from tamram/tamram22-0210a
infrastructure encryption support for premium block blob
2 parents c39fe7f + bbdc27c commit a9cb6c0

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

articles/storage/common/infrastructure-encryption-enable.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ services: storage
66
author: tamram
77

88
ms.service: storage
9-
ms.date: 12/01/2021
9+
ms.date: 02/15/2022
1010
ms.topic: conceptual
1111
ms.author: tamram
1212
ms.reviewer: ozgun
@@ -26,14 +26,14 @@ To doubly encrypt your data, you must first create a storage account or an encry
2626

2727
## Create an account with infrastructure encryption enabled
2828

29-
To enable infrastructure encryption for a storage account, you must configure a storage account to use infrastructure encryption at the time that you create the account. Infrastructure encryption cannot be enabled or disabled after the account has been created. The storage account must be of type general-purpose v2.
29+
To enable infrastructure encryption for a storage account, you must configure a storage account to use infrastructure encryption at the time that you create the account. Infrastructure encryption cannot be enabled or disabled after the account has been created. The storage account must be of type general-purpose v2 or premium block blob.
3030

3131
# [Azure portal](#tab/portal)
3232

3333
To use the Azure portal to create a storage account with infrastructure encryption enabled, follow these steps:
3434

3535
1. In the Azure portal, navigate to the **Storage accounts** page.
36-
1. Choose the **Add** button to add a new general-purpose v2 storage account.
36+
1. Choose the **Add** button to add a new general-purpose v2 or premium block blob storage account.
3737
1. On the **Advanced** tab, locate **Infrastructure** encryption, and select **Enabled**.
3838
1. Select **Review + create** to finish creating the storage account.
3939

@@ -50,7 +50,7 @@ To verify that infrastructure encryption is enabled for a storage account with t
5050

5151
To use PowerShell to create a storage account with infrastructure encryption enabled, make sure you have installed the [Az.Storage PowerShell module](https://www.powershellgallery.com/packages/Az.Storage), version 2.2.0 or later. For more information, see [Install Azure PowerShell](/powershell/azure/install-az-ps).
5252

53-
Next, create a general-purpose v2 storage account by calling the [New-AzStorageAccount](/powershell/module/az.storage/new-azstorageaccount) command. Include the `-RequireInfrastructureEncryption` option to enable infrastructure encryption.
53+
Next, create a general-purpose v2 or premium block blob storage account by calling the [New-AzStorageAccount](/powershell/module/az.storage/new-azstorageaccount) command. Include the `-RequireInfrastructureEncryption` option to enable infrastructure encryption.
5454

5555
The following example shows how to create a general-purpose v2 storage account that is configured for read-access geo-redundant storage (RA-GRS) and has infrastructure encryption enabled for double encryption of data. Remember to replace the placeholder values in brackets with your own values:
5656

@@ -77,7 +77,7 @@ $account.Encryption.RequireInfrastructureEncryption
7777

7878
To use Azure CLI to create a storage account that has infrastructure encryption enabled, make sure you have installed Azure CLI version 2.8.0 or later. For more information, see [Install the Azure CLI](/cli/azure/install-azure-cli).
7979

80-
Next, create a general-purpose v2 storage account by calling the [az storage account create](/cli/azure/storage/account#az-storage-account-create) command and include the `--require-infrastructure-encryption option` to enable infrastructure encryption.
80+
Next, create a general-purpose v2 or premium block blob storage account by calling the [az storage account create](/cli/azure/storage/account#az-storage-account-create) command and include the `--require-infrastructure-encryption option` to enable infrastructure encryption.
8181

8282
The following example shows how to create a general-purpose v2 storage account that is configured for read-access geo-redundant storage (RA-GRS) and has infrastructure encryption enabled for double encryption of data. Remember to replace the placeholder values in brackets with your own values:
8383

0 commit comments

Comments
 (0)