Create an account with infrastructure encryption enabled
To enable infrastructure encryption for a storage account, you must configure a storage account to use infrastructure encryption at the time that you create the account. Infrastructure encryption can't be enabled or disabled after the account has been created. The storage account must be of type general-purpose v2 or premium block blob.
To use the Azure portal to create a storage account with infrastructure encryption enabled, follow these steps:
In the Azure portal, navigate to the Storage accounts page.
Choose the Add button to add a new general-purpose v2 or premium block blob storage account.
On the Encryption tab, locate Enable infrastructure encryption, and select Enabled.
Select Review + create to finish creating the storage account.
To verify that infrastructure encryption is enabled for a storage account with the Azure portal, follow these steps:
Navigate to your storage account in the Azure portal,
Under Settings, choose Encryption.
Create an encryption scope with infrastructure encryption enabled
If infrastructure encryption is enabled for an account, then any encryption scope created on that account automatically uses infrastructure encryption. If infrastructure encryption isn't enabled at the account level, then you have the option to enable it for an encryption scope at the time that you create the scope. The infrastructure encryption setting for an encryption scope can't be changed after the scope is created.
Comments
Post a Comment