CMK with Azure Key Vault Managed HSM for Azure Managed Redis

Question

CMK with Azure Key Vault Managed HSM for Azure Managed Redis

CHUNSIK KIM 21 Microsoft Employee

Please confirm availability of CMK support status with Azure Key Vault managed HSM for Azure Managed Redis.

Services that support customer-managed keys in Azure | Microsoft Learn : AMR is not listed here

Configure disk encryption in Azure Managed Redis - Azure Managed Redis | Microsoft Learn : it seems to indicate it supports CMK for AMR.

Thanks

Srikanth Chavithina 265 Reputation points Microsoft External Staff Moderator

2026-07-30T08:25:22.9033333+00:00

Hi @CHUNSIK KIM

Thank you for your question.

Azure Managed Redis supports CMK for disk encryption. The current documentation explains how to configure CMK using a key stored in Azure Key Vault with a user-assigned managed identity.

For Azure Key Vault Managed HSM, the Azure Managed Redis documentation currently does not mention it as a supported key store or provide steps to configure it.

The Services that support customer-managed keys in Azure article lists Managed HSM support for Azure Cache for Redis, but Azure Managed Redis is not currently listed in that article. Therefore, the Managed HSM support shown for Azure Cache for Redis cannot be considered confirmation for Azure Managed Redis.

Azure Managed Redis with CMK – Supported

CMK with Azure Key Vault – Supported

CMK with Azure Key Vault Managed HSM – Not currently documented or confirmed for Azure Managed Redis

If Managed HSM is required for your setup, further confirmation from Microsoft would be needed before using it with Azure Managed Redis.
CHUNSIK KIM 21 Reputation points Microsoft Employee

2026-07-30T08:37:34.5766667+00:00

So to sum up your answer, you do not know the answer? Thanks anyways
Srikanth Chavithina 265 Reputation points Microsoft External Staff Moderator

2026-08-02T21:49:46.26+00:00

Hi @CHUNSIK KIM
You're correct that my previous response was not definitive.

Based on the current Microsoft documentation, I could not find any official confirmation that Azure Managed Redis supports CMK with Azure Key Vault Managed HSM. While the Azure Managed Redis documentation confirms CMK support, it does not specifically mention Managed HSM, and Azure Managed Redis is not listed in the Managed HSM support matrix.

Therefore, I cannot confirm Managed HSM support based on the current Microsoft documentation.
Srikanth Chavithina 265 Reputation points Microsoft External Staff Moderator

2026-08-12T16:40:43.78+00:00

Hi @CHUNSIK KIM
I hope you had a chance to review the information shared earlier and found it helpful.

If you still have any questions or need further clarification, please let us know in the comments so we can assist you further. We look forward to hearing from you.

Answer accepted by question author

0 additional answers

Your answer

Srikanth Chavithina 265 Reputation points Microsoft External Staff Moderator

2026-07-30T08:25:22.9033333+00:00

Hi @CHUNSIK KIM

Thank you for your question.

Azure Managed Redis supports CMK for disk encryption. The current documentation explains how to configure CMK using a key stored in Azure Key Vault with a user-assigned managed identity.

For Azure Key Vault Managed HSM, the Azure Managed Redis documentation currently does not mention it as a supported key store or provide steps to configure it.

The Services that support customer-managed keys in Azure article lists Managed HSM support for Azure Cache for Redis, but Azure Managed Redis is not currently listed in that article. Therefore, the Managed HSM support shown for Azure Cache for Redis cannot be considered confirmation for Azure Managed Redis.

Azure Managed Redis with CMK – Supported

CMK with Azure Key Vault – Supported

CMK with Azure Key Vault Managed HSM – Not currently documented or confirmed for Azure Managed Redis

If Managed HSM is required for your setup, further confirmation from Microsoft would be needed before using it with Azure Managed Redis.
CHUNSIK KIM 21 Reputation points Microsoft Employee

2026-07-30T08:37:34.5766667+00:00

So to sum up your answer, you do not know the answer? Thanks anyways
Srikanth Chavithina 265 Reputation points Microsoft External Staff Moderator

2026-08-02T21:49:46.26+00:00

Hi @CHUNSIK KIM
You're correct that my previous response was not definitive.

Based on the current Microsoft documentation, I could not find any official confirmation that Azure Managed Redis supports CMK with Azure Key Vault Managed HSM. While the Azure Managed Redis documentation confirms CMK support, it does not specifically mention Managed HSM, and Azure Managed Redis is not listed in the Managed HSM support matrix.

Therefore, I cannot confirm Managed HSM support based on the current Microsoft documentation.
Srikanth Chavithina 265 Reputation points Microsoft External Staff Moderator

2026-08-12T16:40:43.78+00:00

Hi @CHUNSIK KIM
I hope you had a chance to review the information shared earlier and found it helpful.

If you still have any questions or need further clarification, please let us know in the comments so we can assist you further. We look forward to hearing from you.

Answer 1

Hi CHUNSIK KIM,

Thank you for your patience.

We reviewed the Azure Managed Redis (AMR) documentation and also validated this with the Azure Managed Redis engineering team.

Azure Managed Redis does support Customer Managed Keys (CMK) using Azure Key Vault Managed HSM as the key source. While the public "Services that support customer-managed keys in Azure" matrix currently lists Azure Cache for Redis and does not yet explicitly list Azure Managed Redis, the AMR product team has confirmed that Managed HSM is supported by Azure Managed Redis.

Regarding key rotation, the Azure Managed Redis CMK documentation states that the service automatically detects and uses the latest key version after rotation and typically picks up the new key version within approximately two hours. Manual updates to the Redis resource are not required when rotating to a new key version.

Please note that documentation updates may lag behind product support announcements, but based on the engineering team's confirmation, Managed HSM is a supported configuration for Azure Managed Redis.

AMR CMK doc:: Configure disk encryption in Azure Managed Redis - Azure Managed Redis | Microsoft Learn

I hope this helps. Please let me know if you have any questions.

If this information answers your question, please consider marking the answer as Accepted so it can help other community members with similar questions.

CHUNSIK KIM 21 Reputation points Microsoft Employee

2026-08-18T12:59:31.1633333+00:00

Thanks for the confirmation.