Yannick Dils 4/3/2026

Customer-Managed Keys for Confidential AVD: A Complete Lifecycle Guide

Read Original

This article provides a comprehensive lifecycle guide for Customer-Managed Keys (CMK) in Confidential Azure Virtual Desktop (AVD) session hosts. It covers why CMK is needed for compliance, setting up Key Vault and Disk Encryption Set with Bicep, unique key rotation constraints for Confidential VMs, automated alerting before key expiration via Event Grid and Azure Monitor, and the impact of key revocation. Includes source code, Bicep modules, PowerShell scripts, and Azure DevOps pipelines.

Customer-Managed Keys for Confidential AVD: A Complete Lifecycle Guide

Comments

No comments yet

Be the first to share your thoughts!

Browser Extension

Get instant access to AllDevBlogs from your browser

Top of the Week

No top articles yet