This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 85%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EOS%3C/text%3E%3C/svg%3E)
Hi all,
I'm trying to understand if with flexible postgreSQL Database, volume encryption can be configured in a way in which keys are managed by me and not by the system, using a key vault or something similar... I've found that encryption (similar to TDE) is provided by default but seems to me that keys are defined and manage transparenty by azure itself...
thanks
Simone
An Azure service for virtual machines (VMs) that helps address organizational security and compliance requirements by encrypting the VM boot and data disks with keys and policies that are controlled in Azure Key Vault.
An Azure managed PostgreSQL database service for app development and deployment.
Hi @Oprandi, Simone Welcome to the Microsoft Q&A Platform, and thanks for your query
For Postgres single server you can use BYOK, for Postgres flexible server BYOK customer-managed key is in preview however I will check with the internal product team and provide you with more details.
Regards
Geetha
Hi Geetha,
thanks for you fast reply, BYOK refert to the possibility to importing keys from local hardware protection modules or I'm wrong?
What I'm interested in is more related to the possibility of use the key vault for manage custom keys with flexible server as is described here https://learn.microsoft.com/en-us/azure/postgresql/single-server/how-to-data-encryption-portal for the single server...
thanks in advance for you support
Simone
Answer accepted by question author
Hi, @Oprandi, Simone as I mentioned Customer Managed Key with the flexible server is still in private preview and will be GA soon.
Please let me know if you need any additional information.
Regards
Geetha
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 31%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENM%3C/text%3E%3C/svg%3E)
@GeethaThatipatri-MSFT would it be possibly to join the private preview to test the function?
@Nieuwenhuis, Martijn (MNHAZAdmin) I have to check with the internal team and provide you with more details, sorry for the delay in my response.
Regards
Geetha
HI thanks, any forecast about the GA?
thanks anyway... you really helped me...
Simone
@Oprandi, Simone Thanks for the response, I will update here once I get more information about GA.
Thank you for visiting the Microsoft QA forums! Have a great day!
Regards
Geetha
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 38%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
Hi!
Any news on this front? Official comparison table still plainly says "No", without even a hint it will be coming, some clarification on this issues would be much appreciated!
Regards
Julian