Lab: 27 Encrypt Boot volume with Custom managed keys (CMK) - TanveeKhanDB/OCI GitHub Wiki

Encrypt Boot volume with Custom managed keys

It means the operating system disk (boot volume) of a virtual machine or server is encrypted using encryption keys that we can control, instead of keys fully managed by the cloud provider.

Usage:

  • Better security control
  • Meet compliance requirements
  • Ability to revoke access by disabling keys
  • Audit key usage

Steps to perfrom Encryption of Boot volume with Custom managed keys in OCI.

Getting error: As two service also needs permission to communicate with each other hence below mentioned policy need to assing.

allow service blockstorage to use keys in compartment Hub_storage_and_compute_compartment

Its changed to oracle manage key to Custome manage key