June 12, 2025 · AzureIn preview
Public Preview: Encrypt Premium SSD v2 and Ultra Disks with Cross Tenant Customer Managed Keys
Cross-tenant customer managed keys (CMK) for Premium SSD v2 and Ultra Disks is now in public preview in select regions.
Encrypting managed disks with cross-tenant CMK enables encrypting the disk with a CMK hosted in an Azure Key Vault in a different Microsoft Entra tenant to the disk.
Many service providers building Software as a Service (SaaS) offerings on Azure want to give their customers the option of managing their own encryption keys. Customers of service providers can now use cross-tenant CMK with Premium SSD v2 and Ultra disks and manage the encryption keys in their own Microsoft Entra tenant using Azure Key Vault. As a result, they will have complete control of their customer managed keys and their data.