This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 71%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
What is the cost of encrypting the Azure disk with Customer Managed Keys. i can see if have to pay cost of Azure Key Vault. What is the cost the Disk Encryption Set key ?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 1%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERK%3C/text%3E%3C/svg%3E)
HI ,
Disk Encryption does not cost anything ,but there are charges associated with the use of Azure Key Vault. For more information on Azure Key Vault costs, see the Key Vault pricing page.
https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-faq If the above is useful please click Accept Answer.
I am not talking about azure disk encryption. I am talking about azure disk CMK encryption. Hope you know azure disk supports 4 types of encryption and CMK encryption is one amongst them. CMK encryption comes under Server side encryption, where in we use azure disk encryption set. What is the cost of this disk encryption set ? https://learn.microsoft.com/en-us/azure/virtual-machines/disk-encryption-overview
Hello MS Techie,
If an answer has been helpful, please consider accepting answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!
Hello MS Techie,
If an answer has been helpful, please consider accepting answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!
Hi MS Techie, - We received your feedback that the answer provided on the thread was not helpful.
Kindly let us know what we could have done better to improve the answer and make your engagement experience good. We are here to help you and strive to make your experience better and greatly value your feedback.
Our engineer have provided a detailed answer which has clear steps for which you are looking for.If you wish, you may re-surveying/rating for the engagement you received on the thread. Your feedback is very important to us.
Looking forward to you reply. Much appreciate your feedback!
Hi MS Techie, - We received your feedback that the answer provided on the thread was not helpful.
Kindly let us know what we could have done better to improve the answer and make your engagement experience good. We are here to help you and strive to make your experience better and greatly value your feedback.
Our engineer have provided a detailed answer which has clear steps for which you are looking for.If you wish, you may re-surveying/rating for the engagement you received on the thread. Your feedback is very important to us.
Looking forward to you reply. Much appreciate your feedback!
Hello MS Techie, Thank you for reaching out to the Microsoft Q&A platform.
If you are talking about server-side encryption with customer-managed keys for managed disks. There's no charge for encrypting VM disks with Azure Disk Encryption with CMK, but there are charges associated with the use of Azure Key Vault. For more information on Azure Key Vault costs, see the Key Vault pricing page.
If this does answer your question, please accept it as the answer as a token of appreciation.
when creating customer managed keys for azure disk encryption , we create something called as disk encryption sets. see pic below. What is the cost of this disk encryption set in azure ?
Hello MS Techie, Disk encryption sets are free of cost in Azure.
Disk encryption sets are just some logical containers for grouping virtual machines (VMs) for disk encryption.
Disk encryption sets enable you to manage disk encryption for multiple VMs as a single entity. Disk encryption sets provide a way to manage disk encryption at scale, with features such as bulk enablement of disk encryption, and monitoring of disk encryption status for all VMs in the set
You can refer to the document below
https://learn.microsoft.com/en-us/azure/virtual-machines/disks-enable-customer-managed-keys-portal
Also, we noticed that you rated an answer as not helpful. We value your feedback and if this answer helped, could you please be so kind to accept answer if i am able to make this a positive experience for you.
Thanks!
yes your earlier answer was not helpful, since i asked about CMK encryption and you spoke about Azure disk encryption. the article that i had read , post which i had raised this question in the forum. Now you answered to the point on the Disk encryption set keys.
CMK = Azure Disk encryption sets + Encryption keys from Key vault.
So What about the cost the RSA 2048 encryption keys from key vault ?
Hi MS Techie, I am glad that my previous answer was to the point, here is the response to the follow up question. The usage cost of RSA 2048 encryption keys from Azure Key Vault depends on the pricing tier of your Key Vault instance. For standard pricing tier, the cost is $0.03 per 10,000 operations for key operations such as create, import, delete, and list. For secret operations such as set, get, delete, and list, the cost is $0.03 per 10,000 operations. For premium pricing tier, the cost is $0.30 per 10,000 operations for key operations and $0.30 per 10,000 operations for secret operations. Note that these prices are subject to change and you should refer to the Azure Key Vault pricing page for the most up-to-date pricing information. If this does answer your question, please hit the accept answer button on my response as a token of appreciation.