Edit

Enable disk encryption for your cluster in Azure Data Explorer

  • Article

Your cluster security settings allow you to enable disk encryption on your cluster. Enabling encryption at rest on your cluster provides data protection for stored data. The disk encryption is implemented using either Azure Disk Encryption or encryption at host depending on the SKU of the cluster. The data is encrypted at rest using Microsoft-managed keys.

Note

  • Enabling disk encryption can take up to 20 minutes during which the cluster will be unavailable.
  • Legacy virtual machine (VM) sizes such as the Dv2 family are not supported. For more information, see Finding supported VM sizes.

  1. In the Azure portal, go to your Azure Data Explorer cluster resource. Under the Settings heading, select Security.

    Screenshot of security page, showing disk encryption at rest being turned on.

  2. In the Security window, select On for the Disk encryption security setting.

  3. Select Save.

Note

Select Off to disable the encryption after it has been enabled.

Considerations

The following considerations apply to encryption using Azure Disk Encryption:

  • Performance impact of up to a single digit
  • Can't be used with sandboxes

Related content