locked
Storage Account GRS - Is replication encrypted? RRS feed

  • Question

  • Hi,

    When a storage account is configured as GRS, is the data replicated from A to B encrypted in flight? If so, can you specify what technique is used (HTTPS, proprietary 256 bit, etc.)

    Thx!

    Thursday, September 21, 2017 3:44 PM

All replies

  • Azure Storage provides a comprehensive set of security capabilities which together enable developers to build secure applications. Data can be secured in transit between an application and Azure by using Client-Side Encryption, HTTPs, or SMB 3.0. Storage Service Encryption provides encryption at rest, handling encryption, decryption, and key management in a totally transparent fashion. All data is encrypted using 256-bit AES encryption, one of the strongest block ciphers available.

    For more information; refer to this article

    ---------------------------------------------------------------------------------------------------
    Do click on "Mark as Answer" on the post that helps you, this can be beneficial to other community members.

    Thursday, September 21, 2017 3:57 PM
  • Sorry, this question does not relate to application traffic, this is specific to GRS. When I create a GRS storage account, when the data is replicated from the primary to the secondary, is it encrypted and if so, what mechanism does it use.

    Friday, September 22, 2017 7:32 AM
  • Data replicated from one geo to another is encrypted in transit with https.

    ------------------------------------------------------------------------------------------

    Do click on "Mark as Answer" on the post that helps you, this can be beneficial to other community members.

    Wednesday, October 4, 2017 7:23 PM
  • Reference?
    Thursday, October 5, 2017 7:59 AM
  • If you enable Azure SSE then your GRS copies of data would be encrypted. Refer the Azure SSE FAQ section.  

    -----------------------------------------------------------------------------------------------------

    Do click on "Mark as Answer" on the post that helps you, this can be beneficial to other community members.

    Thursday, October 19, 2017 11:30 AM