Skip to content
Back to feed

June 12, 2025 · AzureIn preview

Public Preview: Encrypt Premium SSD v2 and Ultra Disks with Cross Tenant Customer Managed Keys

Cross-tenant customer managed keys (CMK) for Premium SSD v2 and Ultra Disks is now in public preview in select regions.  

Encrypting managed disks with cross-tenant CMK enables encrypting the disk with a CMK hosted in an Azure Key Vault in a different Microsoft Entra tenant to the disk.  

Many service providers building Software as a Service (SaaS) offerings on Azure want to give their customers the option of managing their own encryption keys. Customers of service providers can now use cross-tenant CMK with Premium SSD v2 and Ultra disks and manage the encryption keys in their own Microsoft Entra tenant using Azure Key Vault. As a result, they will have complete control of their customer managed keys and their data. 

Learn more.