You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/key-vault/managed-hsm/multi-region-replication.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -94,7 +94,7 @@ Multi-region replication into an extended region incurs extra billing (x2), as a
94
94
95
95
## Soft-delete behavior
96
96
97
-
The [Managed HSM soft-delete feature](soft-delete-overview.md) allows recovery of deleted HSMs and keys however in a multi-region replication enabled scenario, there are subtle differences where the secondary HSM must be deleted before soft-delete can be executed on the primary HSM. Additionally, when an extension is deleted, it's purged immediately and doesn't go into a soft-delete state that stops all billing for the extension. You can always extend to a new region from the primary if needed.
97
+
The [Managed HSM soft-delete feature](soft-delete-overview.md) allows recovery of deleted HSMs and keys however in a multi-region replication enabled scenario, there are subtle differences where the secondary HSM must be deleted before soft-delete can be executed on the primary HSM. Additionally, when an extended region is removed from the primary HSM, the HSM in the removed region is purged instead of entering a soft-delete state, and billing for the purged HSM ends immediately. You can always extend to a new extended region from the primary if needed.
98
98
99
99
## Private link behavior with Multi-region replication
100
100
@@ -129,9 +129,9 @@ If creating a new Managed HSM pool and then extending to an extended region, ref
129
129
> [!NOTE]
130
130
> These commands requires Azure CLI version 2.48.1 or higher. To install the latest version, see [How to install the Azure CLI](/cli/azure/install-azure-cli).
131
131
132
-
### Add a secondary HSM in another region
132
+
### Extend a primary HSM into an extended region
133
133
134
-
To extend a managed HSM pool to another region, run the following command that will automatically create an extended HSM.
134
+
To extend a managed HSM pool to another region, run the following command that will automatically create a new HSM in an extended region.
135
135
136
136
```azurecli-interactive
137
137
az keyvault region add --hsm-name "ContosoMHSM" --region "australiaeast"
@@ -140,7 +140,7 @@ az keyvault region add --hsm-name "ContosoMHSM" --region "australiaeast"
140
140
> [!NOTE]
141
141
> "ContosoMHSM" in this example is the primary HSM pool name; "australiaeast" is the extended region into which you are extending it.
142
142
143
-
### Remove a secondary HSM in another region
143
+
### Remove an extended region from the primary HSM
144
144
145
145
Once you remove an extended HSM, the HSM partitions in the other region will be purged. All secondaries must be deleted before a primary managed HSM can be soft-deleted or purged. Only secondaries can be deleted using this command. The primary can only be deleted using the [soft-delete](soft-delete-overview.md#soft-delete-behavior) and [purge](soft-delete-overview.md#purge-protection) commands
0 commit comments