What happened with azure services used encryption setting enabled customer-managed key in key vault if key has expired?

Question

Hi,

We settings on some azure services used encryption with customer-managed key use in azure key vaults. which effect to those services? in this case we use encryption customer-managed key in key vaults, whose key has expired.

such as service i used this setting on synapse workspace, disk on azure vm. will take effect to thos services when key has expired?

BR,

Thanakrit

Answer 1

@thanakrit.r

Thank you for posting your query on Microsoft Q&A, from above description I could understand that you are lloing for advisory on behavior of your environment when you are using a CMK for encryption of your managed disk and it gets expired.

Please do correct me if this is not the case by responding in the comments section.

When a key is either disabled, deleted, or expired, any VMs with either OS or data disks using that key will automatically shut down. After the automated shut down, VMs won't boot until the key is enabled again, or you assign a new key. Generally, disk I/O (read or write operations) start to fail one hour after a key is either disabled, deleted, or expired

Thanks,

Akshay Kaushik

Please do accept the answer and rate your experience if the above-mentioned suggestion works as per your business need.