Lab: 27 Encrypt Boot volume with Custom managed keys (CMK)

Encrypt Boot volume with Custom managed keys

It means the operating system disk (boot volume) of a virtual machine or server is encrypted using encryption keys that we can control, instead of keys fully managed by the cloud provider.

Usage:

• Better security control
• Meet compliance requirements
• Ability to revoke access by disabling keys
• Audit key usage

---

Steps to perfrom Encryption of Boot volume with Custom managed keys in OCI.

Getting error: As two service also needs permission to communicate with each other hence below mentioned policy need to assing.

allow service blockstorage to use keys in compartment Hub_storage_and_compute_compartment

Its changed to oracle manage key to Custome manage key