[BYOK] Secure data in the tenant with own company key

[tingrida]

Hi folks,

In a DT blog from 2023 (https://www.dynatrace.com/news/blog/data-privacy-by-design/) we found some information about "... tenants can bring their keys for further encryption management."

There was even timeline for Implementation of it where I would guess its being available on AWS already and "to be available" on Azure by EOY2023. We would like to test it, but I am unable to find any documentation about "how to" so far.

Anybody here has experience about it?

BR,

Ingrida

[Julius_Loman]

Afaik, this is on a roadmap, I have several customers asking for it. Maybe @milansteskal or @Michael_Plank can share more details.

[Michael_Plank · Accepted solution]

Hi @tingrida ,

I'm the responsible Product Manager for Dynatrace data separation and encryption. As of today, there is no feature available to manage the encryption key for data-at-rest in SaaS. But that feature is on the roadmap and implementation on AWS will start soon. We have planned to do a PREVIEW program and are actively looking for interested customers.

If you are interested, please reach out to me via [email protected] and add your Dynatrace representatives to CC please.

Best,
Michael

[tingrida]

Hi @Michael_Plank ,

sorry for later replay, our customer is on Azure, so we could not have tested in on AWS 😞 But we happy to participate as soon as it is available on Azure.

Best,

Ingrida

[Yosi_Neuman]

Coming with version 331 

https://docs.dynatrace.com/docs/shortlink/preview-program#manage-encryption-keys-byok

HTH

Yos 

[pbienkow]

When Azure will be available? It is really disappointing that there is such a long delay compared to AWS.

[Michael_Plank]

Hi @pbienkow, 

I can totally understand your disappointment. Unfortunately there are quite some technical differences for a BYOK implementation on Azure compared to the AWS implementation, which is the main reason for the delay.

The BYOK on Azure feature is planned to be available in 2027. Unfortunately I don't have any more precise schedule to share right now. Once I have more clarity on the timeline, I'll post the update here.

Best,
Michael