Microsoft announced the GA of BYOK. This was in preview and available only in the EUAP region so far. This also means that we can now implement Customer Key with keys generated in on-premises HSMs. Supported HSMs have also increased from 3 to 5 vendors. There are pre-reqs, limits, region planning etc., required. I have already helped a client deploy BYOK and Customer Key using the new method in the EUAP region, move over to this GA, plan the key rotation, etc. Connect with me if you want to learn more. I will be very happy to help with workshops, planning, design, execution, and governance.
Key Vault bring your own key (BYOK) is now generally available