Cross-tenant customer
managed keys (CMK) for Premium SSD v2 and Ultra Disks is now in public preview
in select regions.
Encrypting managed disks
with cross-tenant CMK enables encrypting the disk with a CMK hosted in an Azure
Key Vault in a different Microsoft Entra tenant to the disk.
Many service providers
building Software as a Service (SaaS) offerings on Azure want to give their
customers the option of managing their own encryption keys. Customers of
service providers can now use cross-tenant CMK with Premium SSD v2 and Ultra
disks and manage the encryption keys in their own Microsoft Entra tenant using
Azure Key Vault. As a result, they will have complete control of their customer
managed keys and their data.
Learn
more.