Share via


Encrypt data at-rest with customer-managed encryption key

Enabled for Public preview General availability
Users by admins, makers, or analysts - Feb 24, 2025

Business value

With this capability, you can meet your data and privacy policy requirements by following standard privacy guidelines.

Feature details

With Dynamics 365 Business Central 2024 release wave 1, you can encrypt your environment database with your own encryption key. This feature, also known as a customer-managed key (CMK), gives you enhanced data protection and compliance for your business data. With CMK, use your own Azure Key Vault key to protect and control access to the key that encrypts your environment database. You get more flexibility and control over your encryption keys, including the ability to rotate, revoke, or restore them.

You manage this feature in the Power Platform admin center. The Business Central environment must link to a Power Platform environment. When you enable CMK on a Power Platform environment that links to a Business Central environment, the same CMK policy applies to both the Power Platform and Business Central environments.

Geographic areas

Visit the Explore Feature Geography report for Microsoft Azure areas where this feature is planned or available.

Language availability

Visit the Explore Feature Language report for information on this feature's availability.