Once you've created the two new Azure subscriptions, you'll need to submit the appropriate Customer Key offer request in the Microsoft FastTrack portal. Submit a request to activate Customer Key for Office 365 Following these best practices will minimize the impact of human error while helping to manage the resources used by Customer Key. There is no practical limit to the number of Azure subscriptions that you can create for your organization. This protects your organization in case one of your operators accidentally, intentionally, or maliciously deletes or otherwise mismanages the keys for which they are responsible. You should only use these Azure subscriptions to administer encryption keys for Office 365. As a best practice, Microsoft recommends that you have separate members of your organization configure one key in each subscription. In order to achieve this, you must create two Azure subscriptions. For detailed steps, see Sign up for Azure as an organization.Ĭustomer Key requires two keys for each data encryption policy (DEP). For example, using your work or school account that has global administrator privileges in your organization. Azure Key Vault keys can only be authorized for applications in the same Azure Active Directory (Microsoft Azure Active Directory) tenant, you must create the new subscriptions using the same Azure AD tenant used with your organization where the DEPs will be assigned. As a best practice, Microsoft recommends that you create new Azure subscriptions for use with Customer Key. Create two new Azure subscriptionsĬustomer Key requires two Azure subscriptions. You'll need to complete these steps for all DEPs you use with Customer Key. Obtain the URI for each Azure Key Vault keyĬomplete tasks in Azure Key Vault and Microsoft FastTrack for Customer KeyĬomplete these tasks in Azure Key Vault. Validate Azure Key Vault configuration settings Make sure soft delete is enabled on your key vaultsĪdd a key to each key vault either by creating or importing a key
#KEY FOR MICROSOFT OFFICE 365 REGISTRATION#
This registration process will take five business days to complete.Ĭreate a premium Azure Key Vault in each subscription Register Azure subscriptions to use a mandatory retention period For best results, use version 4.4.0 or later of Azure PowerShell. You'll complete most of these tasks by remotely connecting to Azure PowerShell.
The rest of this article provides detailed instructions for each task, or links out to more information for each step in the process. To set up Customer Key, complete these tasks in the listed order. To provide feedback on Customer Key, including the documentation, send your ideas, suggestions, and perspectives to Overview of steps to set up Customer Key If you need more support beyond the documentation, contact Microsoft Consulting Services (MCS), Premier Field Engineering (PFE), or a Microsoft partner for assistance. Also, become familiar with the terms used in Azure, for example, Azure AD tenant.
To understand the concepts and procedures in this article, review the Azure Key Vault documentation. Existing Office 365 Advanced Compliance licenses will continue to be supported. Office 365 Advanced Compliance SKU is no longer available for procuring new licenses. Office 365 E5, Microsoft 365 E5, Microsoft 365 E5 Compliance, and Microsoft 365 E5 Information Protection & Governance SKUs offer Customer Key. Subscriptions you got through Free, Trial, Sponsorships, MSDN Subscriptions, and those under Legacy Support are not eligible. Approve and set up the account needs for invoicing. Credit Card based payments are not accepted. Use paid Azure Subscriptions using either an Enterprise Agreement or a Cloud Service Provider. Before you set up Customer Keyīefore you get started, ensure that you have the appropriate Azure subscriptions and licensing for your organization. This means that mistakes made with these keys can have a broad impact and may result in service interruptions or irrevocable loss of your data. Customer Key gives you control over root encryption keys whose scope can be as large as your entire organization. These are called out as TIP and IMPORTANT. We strongly recommend that you follow the best practices in this article.
0 kommentar(er)
