LAB 24 ::‐ Encrypt Boot volume with Custom managed keys ? - guptasanjeev-52/oci_docs GitHub Wiki
Encrypting Boot Volume
Login to the OCI Console...
Burger menu > Storage > Block Storage > Boot Volumes...
Click on the three dots Actions menu of the specific boot volume and click Assign master encryption key
BEFORE...
Select Vault compartment, Vault, Master encryption key compartment, and Master encryption key then click Assign
Here we get policy error. We need to assign policy for this service.
Assign policy::-
Go to identity & security → policies >> Select compartment >> Click on create policy...
To fix this go to policy creation and click Create Policy and fill in the details..
Allow service block storage to use keys in compartment < Your_Compartment_Name >
After Assigning policy we will be able to assign encryption key to boot volume...
Again Assign Master Encryption Key >> Select Vault And Master Encryption Key >> Click Assign.
**Key is Assign successfully to Boot Volume **