You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
To check the status of your registration with Azure CLI, call the [az feature](/cli/azure/feature#az-feature-show).
75
+
To check the status of your registration with Azure CLI, call the [az feature](/cli/azure/feature#az-feature-show) command.
72
76
73
77
```azurecli
74
78
az feature show --namespace Microsoft.Storage --name AllowAccountEncryptionKeyForQueues
75
79
az feature show --namespace Microsoft.Storage --name AllowAccountEncryptionKeyForTables
76
80
```
77
81
82
+
# [Template](#tab/template)
83
+
84
+
N/A
85
+
78
86
---
79
87
80
88
### Re-register the Azure Storage resource provider
81
89
82
-
After your registration is approved, you must re-register the Azure Storage resource provider.
90
+
After your registration is approved, you must re-register the Azure Storage resource provider. Use PowerShell or Azure CLI to re-register the resource provider.
91
+
92
+
# [PowerShell](#tab/powershell)
83
93
84
-
Call the [az provider register](/cli/azure/provider#az-provider-register) command:
94
+
To re-register the resource provider with PowerShell, call the [Register-AzResourceProvider](/powershell/module/az.resources/register-azresourceprovider) command.
To re-register the resource provider with Azure CLI, call the [az provider register](/cli/azure/provider#az-provider-register) command.
85
103
86
104
```azurecli
87
105
az provider register --namespace 'Microsoft.Storage'
88
106
```
89
107
108
+
# [Template](#tab/template)
109
+
110
+
N/A
111
+
112
+
---
113
+
90
114
## Create an account that uses the account encryption key
91
115
92
116
You must configure a new storage account to use the account encryption key for queues and tables at the time that you create the storage account. The scope of the encryption key cannot be changed after the account is created.
@@ -188,12 +212,32 @@ After you have created an account that relies on the account encryption key, see
188
212
189
213
To verify that a service in a storage account is using the account encryption key, call the Azure CLI [az storage account](/cli/azure/storage/account#az-storage-account-show) command. This command returns a set of storage account properties and their values. Look for the `keyType` field for each service within the encryption property and verify that it is set to `Account`.
190
214
215
+
# [PowerShell](#tab/powershell)
216
+
217
+
To verify that a service in a storage account is using the account encryption key, call the [Get-AzStorageAccount](/powershell/module/az.storage/get-azstorageaccount) command. This command returns a set of storage account properties and their values. Look for the `KeyType` field for each service within the `Encryption` property and verify that it is set to `Account`.
To verify that a service in a storage account is using the account encryption key, call the [az storage account](/cli/azure/storage/account#az-storage-account-show) command. This command returns a set of storage account properties and their values. Look for the `keyType` field for each service within the encryption property and verify that it is set to `Account`.
228
+
191
229
```azurecli
192
230
az storage account show /
193
231
--name <storage-account> /
194
232
--resource-group <resource-group>
195
233
```
196
234
235
+
# [Template](#tab/template)
236
+
237
+
N/A
238
+
239
+
---
240
+
197
241
## Next steps
198
242
199
243
-[Azure Storage encryption for data at rest](storage-service-encryption.md)
0 commit comments