Search code examples
azureazure-storageazure-blob-storageazure-keyvault

Azure storage account - encryption

I would like to encrypt storage account, I want to use option Customer-managed keys in the Encryption type section. Once I do this I can see in Automated key rotation value Enabled - Using the latest key version. I dont want to use Automated Key rotation, how can I disable it?

enter image description here

Solution

  • If you want to disable the Automated key rotation, please follow the steps below.

    1.Navigate to the keyvault in the portal -> Keys -> click the key -> click the version you want to use -> copy the Key Identifier like below.

    enter image description here

    2.Navigate to the storage account -> Encryption -> Change key -> Enter key URI -> use the one got in step 1 -> Save.

    enter image description here

    Then the Automated key rotation will be disabled.

    enter image description here