You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/storage/common/customer-managed-keys-configure-existing-account.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -170,7 +170,7 @@ To configure customer-managed keys for an existing account with automatic updati
170
170
1. Navigate to your storage account.
171
171
1. On the **Settings** blade for the storage account, click **Encryption**. By default, key management is set to **Microsoft Managed Keys**, as shown in the following image.
@@ -185,13 +185,13 @@ To configure customer-managed keys for an existing account with automatic updati
185
185
1. If you select **System-assigned**, the system-assigned managed identity for the storage account is created under the covers, if it does not already exist.
186
186
1. If you select **User-assigned**, then you must select an existing user-assigned identity that has permissions to access the key vault. To learn how to create a user-assigned identity, see [Manage user-assigned managed identities](../../active-directory/managed-identities-azure-resources/how-manage-user-assigned-managed-identities.md).
187
187
188
-
:::image type="content" source="media/customer-managed-keys-configure-existing-account/select-user-assigned-managed-identity-portal.png" alt-text="Screenshot showing how to select a user-assigned managed identity for key vault authentication":::
188
+
:::image type="content" source="media/customer-managed-keys-configure-existing-account/select-user-assigned-managed-identity-portal.png" alt-text="Screenshot showing how to select a user-assigned managed identity for key vault authentication.":::
189
189
190
190
1. Save your changes.
191
191
192
192
After you've specified the key, the Azure portal indicates that automatic updating of the key version is enabled and displays the key version currently in use for encryption. The portal also displays the type of managed identity used to authorize access to the key vault and the principal ID for the managed identity.
193
193
194
-
:::image type="content" source="media/customer-managed-keys-configure-existing-account/portal-auto-rotation-enabled.png" alt-text="Screenshot showing automatic updating of the key version enabled":::
194
+
:::image type="content" source="media/customer-managed-keys-configure-existing-account/portal-auto-rotation-enabled.png" alt-text="Screenshot showing automatic updating of the key version enabled.":::
195
195
196
196
### [PowerShell](#tab/powershell)
197
197
@@ -240,12 +240,12 @@ To configure customer-managed keys with manual updating of the key version in th
240
240
1. To locate the key URI in the Azure portal, navigate to your key vault, and select the **Keys** setting. Select the desired key, then click the key to view its versions. Select a key version to view the settings for that version.
241
241
1. Copy the value of the **Key Identifier** field, which provides the URI.
242
242
243
-
:::image type="content" source="media/customer-managed-keys-configure-existing-account/portal-copy-key-identifier.png" alt-text="Screenshot showing key vault key URI in Azure portal":::
243
+
:::image type="content" source="media/customer-managed-keys-configure-existing-account/portal-copy-key-identifier.png" alt-text="Screenshot showing key vault key URI in Azure portal.":::
244
244
245
245
1. In the **Encryption key** settings for your storage account, choose the **Enter key URI** option.
246
246
1. Paste the URI that you copied into the **Key URI** field. Omit the key version from the URI to enable automatic updating of the key version.
247
247
248
-
:::image type="content" source="media/customer-managed-keys-configure-existing-account/portal-specify-key-uri.png" alt-text="Screenshot showing how to enter key URI in Azure portal":::
248
+
:::image type="content" source="media/customer-managed-keys-configure-existing-account/portal-specify-key-uri.png" alt-text="Screenshot showing how to enter key URI in Azure portal.":::
249
249
250
250
1. Specify the subscription that contains the key vault.
251
251
1. Specify either a system-assigned or user-assigned managed identity.
Copy file name to clipboardExpand all lines: articles/storage/common/customer-managed-keys-configure-new-account.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -123,7 +123,7 @@ To configure customer-managed keys for a new storage account with automatic upda
123
123
1. In the **Encryption key** field, choose **Select a key vault and key**, and specify the key vault and key.
124
124
1. For the **User-assigned identity** field, select an existing user-assigned managed identity.
125
125
126
-
:::image type="content" source="media/customer-managed-keys-configure-new-account/portal-new-account-configure-cmk.png" alt-text="Screenshot showing how to configure customer-managed keys for a new storage account in Azure portal":::
126
+
:::image type="content" source="media/customer-managed-keys-configure-new-account/portal-new-account-configure-cmk.png" alt-text="Screenshot showing how to configure customer-managed keys for a new storage account in Azure portal.":::
127
127
128
128
1. Select the **Review** button to validate and create the account.
129
129
@@ -184,13 +184,13 @@ To configure customer-managed keys with manual updating of the key version in th
184
184
1. To locate the key URI in the Azure portal, navigate to your key vault, and select the **Keys** setting. Select the desired key, then click the key to view its versions. Select a key version to view the settings for that version.
185
185
1. Copy the value of the **Key Identifier** field, which provides the URI.
186
186
187
-
:::image type="content" source="media/customer-managed-keys-configure-new-account/portal-copy-key-identifier.png" alt-text="Screenshot showing key vault key URI in Azure portal":::
187
+
:::image type="content" source="media/customer-managed-keys-configure-new-account/portal-copy-key-identifier.png" alt-text="Screenshot showing key vault key URI in Azure portal.":::
188
188
189
189
1. In the **Encryption key** settings for your storage account, choose the **Enter key URI** option.
190
190
1. Paste the URI that you copied into the **Key URI** field. Include the key version on the URI to configure manual updating of the key version.
191
191
1. Specify a user-assigned managed identity by choosing the **Select an identity** link.
192
192
193
-
:::image type="content" source="media/customer-managed-keys-configure-new-account/portal-specify-key-uri.png" alt-text="Screenshot showing how to enter key URI in Azure portal":::
193
+
:::image type="content" source="media/customer-managed-keys-configure-new-account/portal-specify-key-uri.png" alt-text="Screenshot showing how to enter key URI in Azure portal.":::
194
194
195
195
1. Select the **Review** button to validate and create the account.
0 commit comments