CODEWITHSUNDEEP
databaseazureencryption
G. Werner
G. Werner

Reputation: 309

Difference between Bring-Your-Own-Key (BYOK) and Customer-Managed-Key (CMK) encryption?

On the documentation page of Azure I regularly read the abbreviation BYOK encryption (e.g. here) and CMK encryption (e.g. here).

Can these two terms be used synonymously or is there a difference?

Upvotes: 1

Views: 3204

Answers (2)

zmre
zmre

Reputation: 51

They are often used interchangeably. BYOK usually means the vendor holds the key, but you create it and upload it. CMK can mean that but also sometimes reflects the case where you hold your key in your own KMS instead, so it tends to encompass more patterns than BYOK does in practice. Neither of these have formal definitions that you can rely on though.

Upvotes: 3

Aravind
Aravind

Reputation: 4173

Both are the same. In the azure postgres link you can see that both CMK and BYOK are mentioned in the same paragraph.

As a customer, You bring your own encryption key and you are responsible for managing it.

Upvotes: 1

Related Questions