Prerequisites
- You can use Bring Your Own Key (BYOK) to encrypt your virtual hard disks (VHD) only in Amazon Web Services (AWS) and Google Cloud Platform (GCP).
- You can use only your own encryption key using the open-source software AWS CloudHSM (Hardware Security Modules) or Google Cloud Key Management.
- You must provide us with the Amazon Resource Name (ARN) or Google Resource Name of your encryption key via your Collibra Account Team.
Good to know
- We encrypt only the virtual hard disks that contain the Collibra Platform repository with your encryption key. We do not encrypt the VHDs that contain databases of Metadata Lake, Usage Analytics, Collibra Console or Jobserver, provided that these are on different VHDs.
- Encrypting the VHDs with your own key does not have any impact on future Collibra upgrades.