Compliance level -Azure Platform Managed Keys ?

Question

In Azure portal, at the time of provisioning Azure VM , for the Azure disks, we select the default option of Platform Managed Keys. Now i understand that if we are using software-based Azure Key vault for the Customer Managed Keys , then compliance is FIPS 140-2 Level 1 https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys#compliance Please let me know the compliance level of Platform Managed Keys for Azure Disks ? Is it FIPS 140-2 Level 1 for Platform Managed Keys ?

Answer 1

@MS Techie Apologies for the delay response!

Microsoft Managed Key Encryption Keys are FIPS 140 level 1. For level 2 protection, customer can opt for customer-managed keys Customer-managed keys for account encryption - Azure Storage | Microsoft Learn. Managed HSM provides level 3 protection.

Typically, we do not share insights into implementation details on data encryption or details of policy and procedures. You can steer your customers to our compliance and certification documentation here (Microsoft Trust Center Overview | Microsoft Trust Center).

You want to audit yourself, which is an expensive task, we offer the Right to Audit (R2A) program. You can reach support for more information.
https://www.microsoft.com/en-us/security/business/services/compliance-program-microsoft-cloud

Additional information: Licensing Resources and Documents

Please let us know if you have any further queries. I’m happy to assist you further.

---

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.