![]() To use the Azure CLI commands in this article, you must have the following items: The target key always remains in the HSM protection boundary. This operation happens entirely inside the HSM. When the BYOK file is uploaded to Managed HSM, a Managed HSM uses the KEK private key to decrypt the target key material and import it as an HSM key.The KEK must be in the same managed HSM where the target key will be imported.HSMs enforce the rule that no clear version of a KEK exists outside a Managed HSM. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |