Migration of Encrypted Data with Microsoft Information Protection

Sundram Sontirkey 97 Reputation points


We have got one scenario from client requirements. They need to migrate their files which are encrypted with Microsoft Information Protection to another tenant.

Those files will be again relabeled and encrypted on the new tenant. The most common files found are pdf and office files.

The new tenant would have a completely different domain name.

We are currently thinking of the migration process as below.

  1. Copy files to another folder in the old tenant.
  2. decrypted all copied files by removing labels.
  3. Copy decrypted files to the new tenant.
  4. relabel all copied files in the new tenant.

As per the above scenario and migration process below are my questions.

  • is the above-mentioned migration process, correct?
  • Does the migration process seem to be feasible for 100 TB of data? Are there any other ways of this migration?
  • During the migration what could be the side effect? e.g. owner name missing, access details missing. etc.
  • What are possible technical challenges that we should be taking care of?
  • Is there any tool available by Microsoft or by any third party that could be helpful here?

If any other details are needed, please let me know.

In Advance, Thanks a lot for your answers.

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,274 questions
Azure Information Protection
Azure Information Protection
An Azure service that is used to control and help secure email, documents, and sensitive data that are shared outside the company.
529 questions
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
10,211 questions
Microsoft Purview
Microsoft Purview
A Microsoft data governance service that helps manage and govern on-premises, multicloud, and software-as-a-service data. Previously known as Azure Purview.
1,045 questions
{count} votes

Accepted answer
  1. 2023-12-14T17:50:24.1233333+00:00

    Hello @Sundram Sontirkey , sensitivy labels cannot be migrated to a new tenant so, as you already planned, labels will need to be removed. For your data load, a Phased migration is recommended. Microsoft Consulting Services (MCS) or Microsoft Support may need to get involved. Please refer to the Architecture approaches for Microsoft 365 tenant-to-tenant migrations for more information and recommendations on how to migrate protected files betwen tenants.

    Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.

0 additional answers

Sort by: Most helpful