Self-managed database encryption supports file and image data types
Important
This content is archived and is not being updated. For the latest documentation, go to What is Microsoft Dataverse?. For the latest release plans, go to Dynamics 365 and Microsoft Power Platform release plans.
| Enabled for | Public preview | General availability |
|---|---|---|
| Users, automatically | - | 
Jun 7, 2021 |
Business value
Self-managed database encryption key customers can now use their own file capabilities in Microsoft Dataverse and supply their own encryption key. This provides additional functionality to this segment that is available in our standard Dataverse environments.
Feature details
All organizations using the self-managed database encryption key feature as of version 9.2.21052.00103 can now support the use of Microsoft Dataverse file columns (known as the file data type) and Microsoft Dataverse image columns (known as the image data type). Files and images uploaded will be encrypted at rest and secured using the customer’s provided key.
With the current release, files within self-managed database encryption key organizations are limited to a maximum size of 128 MB per file. All files and images within a self-managed database encryption key organization will be stored in the Dataverse relational storage, instead of Microsoft Dataverse file blob storage.
Other limitations:
- User delegation SAS downloads aren't supported.
- Chunking uploads and downloads are limited to a single chunk.
For information about setting up a self-managed database encryption key, go to Manage the encryption key.
See also
Manage the encryption key (docs)